Changeset 3752017

Timestamp:

10/17/2026 02:30:43 PM (3 weeks ago)

Author:

wpunicorn

Message:

1.1.0: Smart Rules (keywords, writing systems, links), restorable Quarantine, Manage Comments panel, dashboard with charts and insights, redesigned Bulk Clean and Settings. Tag 1.1.0.

Location:

ultimate-comment-cleaner

Files:

• tags/1.1.0 (copied) (copied from ultimate-comment-cleaner/trunk )
• tags/1.1.0/assets/css/admin.css (modified) (1 diff)
• tags/1.1.0/assets/css/dashboard.css (added)
• tags/1.1.0/assets/js/admin.js (modified) (10 diffs)
• tags/1.1.0/assets/js/dashboard.js (added)
• tags/1.1.0/includes (added)
• tags/1.1.0/includes/class-ulticocl-comments-table.php (added)
• tags/1.1.0/includes/class-ulticocl-insights.php (added)
• tags/1.1.0/includes/class-ulticocl-matcher.php (added)
• tags/1.1.0/languages (deleted)
• tags/1.1.0/readme.txt (modified) (5 diffs)
• tags/1.1.0/ultimate-comment-cleaner.php (modified) (23 diffs)
• tags/1.1.0/uninstall.php (added)
• trunk/assets/css/admin.css (modified) (1 diff)
• trunk/assets/css/dashboard.css (added)
• trunk/assets/js/admin.js (modified) (10 diffs)
• trunk/assets/js/dashboard.js (added)
• trunk/includes (added)
• trunk/includes/class-ulticocl-comments-table.php (added)
• trunk/includes/class-ulticocl-insights.php (added)
• trunk/includes/class-ulticocl-matcher.php (added)
• trunk/languages (deleted)
• trunk/readme.txt (modified) (5 diffs)
• trunk/ultimate-comment-cleaner.php (modified) (23 diffs)
• trunk/uninstall.php (added)

ultimate-comment-cleaner/tags/1.1.0/assets/css/admin.css

@@ -1043 +1043 @@
 }
 
+/* ------------------------------------------------------------------ */
+/* Smart Rules, Quarantine and Manage Comments                         */
+/* ------------------------------------------------------------------ */
+
+.ulticocl-count {
+    display: inline-block;
+    min-width: 18px;
+    padding: 0 6px;
+    margin-left: 6px;
+    border-radius: 9px;
+    background: var(--remove-comments-warning);
+    color: #fff;
+    font-size: 11px;
+    line-height: 18px;
+    text-align: center;
+}
+
+.ulticocl-badge {
+    display: inline-block;
+    padding: 2px 8px;
+    border-radius: 3px;
+    background: var(--remove-comments-gray-200);
+    color: var(--remove-comments-gray-700);
+    font-size: 11px;
+    font-weight: 600;
+    line-height: 1.6;
+    text-transform: uppercase;
+    letter-spacing: 0.02em;
+}
+
+.ulticocl-badge-approved { background: #d1fae5; color: #065f46; }
+.ulticocl-badge-pending { background: #fef3c7; color: #92400e; }
+.ulticocl-badge-spam { background: #fee2e2; color: #991b1b; }
+.ulticocl-badge-quarantine,
+.ulticocl-badge-action-quarantine { background: #fef3c7; color: #92400e; }
+.ulticocl-badge-action-spam { background: #fee2e2; color: #991b1b; }
+.ulticocl-badge-action-delete { background: #1f2937; color: #fff; }
+
+.ulticocl-chip {
+    display: inline-block;
+    margin-left: 4px;
+    padding: 0 6px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: 10px;
+    background: var(--remove-comments-gray-50);
+    color: var(--remove-comments-gray-600);
+    font-size: 11px;
+    line-height: 18px;
+}
+
+.ulticocl-callout {
+    margin: 0 0 24px;
+    padding: 20px 24px;
+    border-left: 4px solid var(--remove-comments-primary);
+    border-radius: 4px;
+    background: var(--remove-comments-gray-50);
+}
+
+.ulticocl-callout h2 { margin-top: 0; }
+
+/* Quick-start presets: one line that glides left and right with the pointer. */
+.ulticocl-presets {
+    display: flex;
+    align-items: center;
+    gap: 14px;
+    min-width: 0;
+    margin-bottom: 16px;
+}
+
+.ulticocl-presets-title {
+    flex: none;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+}
+
+.ulticocl-presets-viewport {
+    flex: 1;
+    min-width: 0;
+    padding: 5px 6px;
+    overflow-x: auto;
+    overflow-y: hidden;
+    scrollbar-width: none;
+    -ms-overflow-style: none;
+}
+
+.ulticocl-presets-viewport::-webkit-scrollbar { display: none; }
+
+/* Fade the edge that has more buttons behind it. */
+.ulticocl-presets-viewport.has-right {
+    -webkit-mask-image: linear-gradient(to right, #000 calc(100% - 40px), transparent);
+    mask-image: linear-gradient(to right, #000 calc(100% - 40px), transparent);
+}
+
+.ulticocl-presets-viewport.has-left {
+    -webkit-mask-image: linear-gradient(to left, #000 calc(100% - 40px), transparent);
+    mask-image: linear-gradient(to left, #000 calc(100% - 40px), transparent);
+}
+
+.ulticocl-presets-viewport.has-left.has-right {
+    -webkit-mask-image: linear-gradient(to right, transparent, #000 40px, #000 calc(100% - 40px), transparent);
+    mask-image: linear-gradient(to right, transparent, #000 40px, #000 calc(100% - 40px), transparent);
+}
+
+.ulticocl-presets-track {
+    display: flex;
+    flex-wrap: nowrap;
+    gap: 8px;
+    width: max-content;
+}
+
+.ulticocl-preset {
+    display: inline-flex;
+    flex: none;
+    align-items: center;
+    gap: 8px;
+    height: 38px;
+    margin: 0;
+    padding: 0 14px 0 8px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: 4px;
+    background: #fff;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    box-shadow: 0 1px 2px rgba(17, 24, 39, 0.05);
+    transition: border-color 0.15s ease, background-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease, transform 0.15s ease;
+}
+
+.ulticocl-preset .dashicons {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    width: 24px;
+    height: 24px;
+    border-radius: 4px;
+    background: #eef2ff;
+    color: var(--remove-comments-primary);
+    font-size: 15px;
+    line-height: 1;
+    transition: background-color 0.15s ease, color 0.15s ease;
+}
+
+.ulticocl-preset:hover,
+.ulticocl-preset:focus-visible {
+    border-color: var(--remove-comments-primary);
+    background: #f7f7ff;
+    color: var(--remove-comments-primary-dark);
+    box-shadow: 0 0 0 3px rgba(99, 102, 241, 0.12);
+    outline: none;
+}
+
+.ulticocl-preset:hover .dashicons,
+.ulticocl-preset:focus-visible .dashicons {
+    background: var(--remove-comments-primary);
+    color: #fff;
+}
+
+.ulticocl-preset:active { transform: translateY(1px); }
+
+@media (max-width: 600px) {
+    .ulticocl-presets { flex-direction: column; align-items: flex-start; gap: 6px; }
+    .ulticocl-presets-viewport { width: 100%; }
+}
+
+.ulticocl-scan-result {
+    margin: 16px 0;
+    padding: 16px 20px;
+    border: 1px solid var(--remove-comments-gray-200);
+    border-left: 4px solid var(--remove-comments-info);
+    border-radius: 4px;
+    background: #fff;
+}
+
+.ulticocl-scan-result p:first-child { margin-top: 0; }
+.ulticocl-error { color: var(--remove-comments-danger); font-weight: 600; }
+.ulticocl-samples { margin: 8px 0 12px 18px; list-style: disc; }
+
+.ulticocl-progress {
+    height: 8px;
+    border-radius: 4px;
+    background: var(--remove-comments-gray-200);
+    overflow: hidden;
+}
+
+.ulticocl-progress > div {
+    height: 100%;
+    background: var(--remove-comments-primary);
+    transition: width 0.2s ease;
+}
+
+.ulticocl-progress-box {
+    position: fixed;
+    top: 50%;
+    left: 50%;
+    transform: translate(-50%, -50%);
+    z-index: 100001;
+    padding: 20px;
+    border: 2px solid var(--remove-comments-primary);
+    border-radius: 4px;
+    background: #fff;
+    box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);
+}
+
+.remove-comments-modal-content.ulticocl-wide { max-width: 760px; }
+
+.ulticocl-fieldset {
+    margin: 0 0 20px;
+    padding: 12px 16px 4px;
+    border: 1px solid var(--remove-comments-gray-200);
+    border-radius: 4px;
+}
+
+.ulticocl-fieldset legend {
+    padding: 0 6px;
+    font-weight: 600;
+    color: var(--remove-comments-gray-700);
+}
+
+.ulticocl-grid-2,
+.ulticocl-grid-3 {
+    display: grid;
+    gap: 0 16px;
+}
+
+.ulticocl-grid-2 { grid-template-columns: 1fr 1fr; }
+.ulticocl-grid-3 { grid-template-columns: 1fr 1fr 1fr; }
+
+.remove-comments-modal-content textarea,
+.remove-comments-modal-content input[type="text"],
+.remove-comments-modal-content input[type="number"] {
+    width: 100%;
+    box-sizing: border-box;
+}
+
+.remove-comments-modal-content input.small-text { width: 70px; }
+.remove-comments-form-group input[type="number"].small-text { width: 90px; }
+
+.ulticocl-inline-checks {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 6px 16px;
+    margin-top: 8px;
+}
+
+.ulticocl-inline-checks > span {
+    color: var(--remove-comments-gray-600);
+    font-size: 13px;
+    font-weight: 600;
+}
+
+/* Small on/off switches in the brand colour (a real checkbox underneath). */
+.ulticocl-toggle {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    margin: 0;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 400;
+    line-height: 1.2;
+    cursor: pointer;
+    user-select: none;
+}
+
+.remove-comments-toggle-switch.ulticocl-mini { width: 32px; height: 18px; }
+.ulticocl-mini .remove-comments-toggle-slider { border-radius: 18px; }
+
+.ulticocl-mini .remove-comments-toggle-slider:before {
+    width: 12px;
+    height: 12px;
+    left: 3px;
+    bottom: 3px;
+    box-shadow: 0 1px 2px rgba(0, 0, 0, 0.25);
+}
+
+.ulticocl-mini input:checked + .remove-comments-toggle-slider:before { transform: translateX(14px); }
+.ulticocl-toggle:hover .remove-comments-toggle-slider { background-color: var(--remove-comments-gray-400); }
+.ulticocl-toggle:hover input:checked + .remove-comments-toggle-slider { background-color: var(--remove-comments-primary-dark); }
+
+/* A switch that sits in a row of fields lines up with the inputs beside it. */
+.ulticocl-field-toggle { display: flex; align-items: flex-end; }
+.ulticocl-field-toggle .ulticocl-toggle { height: var(--ulticocl-field, 40px); }
+/* Six tabs do not fit a phone: let the bar scroll sideways instead of overflowing the page. */
+@media (max-width: 782px) {
+    .remove-comments-tabs {
+        overflow-x: auto;
+        overflow-y: hidden;
+        scrollbar-width: thin;
+    }
+
+    .remove-comments-tab {
+        flex: none;
+        white-space: nowrap;
+    }
+}
+
+.ulticocl-filters {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 8px 14px;
+    margin-bottom: 12px;
+}
+
+.ulticocl-filters input[type="search"] { min-width: 280px; }
+.ulticocl-filters label { display: inline-flex; align-items: center; gap: 4px; }
+
+.remove-comments-comments-panel .subsubsub { float: none; margin: 0 0 8px; }
+.remove-comments-comments-panel .wp-list-table .column-cb { width: 2.2em; }
+.remove-comments-comments-panel .wp-list-table .column-author { width: 18%; }
+.remove-comments-comments-panel .wp-list-table .column-date { width: 130px; }
+
+@media (max-width: 768px) {
+    .ulticocl-grid-2,
+    .ulticocl-grid-3 { grid-template-columns: 1fr; }
+    .ulticocl-filters input[type="search"] { min-width: 0; width: 100%; }
+}
+
+/* One field height. WordPress gives selects extra height (53px next to 40px inputs), so every
+   input and select in the plugin shares one box and rows line up. */
+.remove-comments-wrap { --ulticocl-field: 40px; }
+
+.remove-comments-wrap .remove-comments-select,
+.remove-comments-wrap .remove-comments-form-group select,
+.remove-comments-wrap .remove-comments-form-group input[type="text"],
+.remove-comments-wrap .remove-comments-form-group input[type="email"],
+.remove-comments-wrap .remove-comments-form-group input[type="number"]:not(.small-text),
+.remove-comments-wrap input.remove-comments-form-input {
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    min-height: 0;
+    margin: 0;
+    padding-top: 0;
+    padding-bottom: 0;
+    line-height: 1.3;
+}
+
+/* The inline percentage field sits inside a sentence, so it stays compact. */
+.remove-comments-wrap .remove-comments-form-group input[type="number"].small-text {
+    box-sizing: border-box;
+    width: 80px;
+    height: 34px;
+    padding: 0 10px;
+}
+
+/* ===================================================================== */
+/* Design pass: one set of tokens for every panel, matching the dashboard */
+/* Controls use a 4px radius, surfaces (cards, tables, dialogs) 12px.     */
+/* Spacing follows a 4/8px rhythm.                                        */
+/* ===================================================================== */
+
+.remove-comments-wrap {
+    --ulticocl-field: 40px;
+    --uc-radius: 4px;
+    --uc-radius-lg: 12px;
+    --uc-line: #e5e7eb;
+    --uc-line-soft: #f3f4f6;
+    --uc-ink: #1f2937;
+    --uc-ink-2: #4b5563;
+    --uc-muted: #6b7280;
+    --uc-shadow: 0 1px 2px rgba(17, 24, 39, 0.04);
+    --uc-shadow-lg: 0 16px 40px rgba(17, 24, 39, 0.18);
+    --uc-focus: 0 0 0 3px rgba(99, 102, 241, 0.2);
+}
+
+/* ---- Panel header ------------------------------------------------------- */
+
+.remove-comments-panel-header {
+    margin-bottom: 24px;
+    padding-bottom: 16px;
+    border-bottom: 1px solid var(--uc-line);
+}
+
+.remove-comments-panel-header h2 {
+    margin: 0 0 4px;
+    padding: 0;
+    color: var(--uc-ink);
+    font-size: 20px;
+    font-weight: 700;
+    letter-spacing: -0.01em;
+    line-height: 1.3;
+}
+
+.remove-comments-panel-header p {
+    max-width: 72ch;
+    margin: 0;
+    color: var(--uc-muted);
+    font-size: 13px;
+    line-height: 1.55;
+}
+
+.ulticocl-panel-head {
+    display: flex;
+    align-items: flex-start;
+    justify-content: space-between;
+    gap: 24px;
+}
+
+.ulticocl-panel-head-text { min-width: 0; }
+.ulticocl-panel-head-actions { flex: none; }
+
+/* Destructive action: quiet until hovered, then unmistakably red. */
+.ulticocl-danger-btn {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 16px;
+    border: 1px solid #fca5a5;
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: #b91c1c;
+    font-size: 13px;
+    font-weight: 600;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    transition: background-color 0.15s ease, border-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-danger-btn .dashicons { width: 16px; height: 16px; font-size: 16px; }
+
+.ulticocl-danger-btn:hover {
+    border-color: var(--remove-comments-danger);
+    background: var(--remove-comments-danger);
+    color: #fff;
+}
+
+.ulticocl-danger-btn:focus-visible {
+    outline: none;
+    box-shadow: 0 0 0 3px rgba(239, 68, 68, 0.25);
+}
+
+@media (max-width: 782px) {
+    .ulticocl-panel-head { flex-direction: column; gap: 16px; }
+}
+
+/* ---- Buttons ------------------------------------------------------------ */
+
+.remove-comments-wrap .button,
+.remove-comments-wrap .button-secondary {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 6px;
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    min-height: 0;
+    margin: 0;
+    padding: 0 16px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    box-shadow: none;
+    text-decoration: none;
+    transition: background-color 0.15s ease, border-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-wrap .button:hover,
+.remove-comments-wrap .button-secondary:hover {
+    border-color: var(--remove-comments-primary);
+    background: #f7f7ff;
+    color: var(--remove-comments-primary-dark);
+}
+
+.remove-comments-wrap .button:focus-visible,
+.remove-comments-wrap .button-secondary:focus-visible {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.remove-comments-wrap .button.button-primary {
+    border-color: var(--remove-comments-primary);
+    background: var(--remove-comments-primary);
+    color: #fff;
+}
+
+.remove-comments-wrap .button.button-primary:hover {
+    border-color: var(--remove-comments-primary-dark);
+    background: var(--remove-comments-primary-dark);
+    color: #fff;
+}
+
+.remove-comments-wrap .button[disabled],
+.remove-comments-wrap .button.disabled { opacity: 0.5; cursor: not-allowed; }
+
+.remove-comments-wrap .button-small { height: 32px; padding: 0 12px; font-size: 12px; }
+.remove-comments-wrap .button-hero { height: 44px; padding: 0 22px; font-size: 14px; font-weight: 600; }
+
+.ulticocl-seg button { height: 38px; padding: 0 16px; }
+.ulticocl-seg-small button { height: 28px; padding: 0 12px; }
+
+/* ---- Fields ------------------------------------------------------------- */
+
+.remove-comments-wrap .remove-comments-form-group > label,
+.ulticocl-sublabel {
+    display: block;
+    margin: 0 0 8px;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 600;
+    line-height: 1.4;
+}
+
+.remove-comments-wrap .remove-comments-select,
+.remove-comments-wrap .remove-comments-form-group select {
+    max-width: none; /* WordPress caps selects at 25rem, which left one select narrower than its neighbours */
+    padding-right: 34px;
+    padding-left: 12px;
+    border-color: var(--remove-comments-gray-300);
+    -webkit-appearance: none;
+    appearance: none;
+    background-color: #fff;
+    background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20'%3E%3Cpath d='M5.5 7.5L10 12l4.5-4.5' fill='none' stroke='%236b7280' stroke-width='1.8' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
+    background-repeat: no-repeat;
+    background-position: right 10px center;
+    background-size: 18px;
+}
+
+.remove-comments-wrap .remove-comments-select:focus,
+.remove-comments-wrap .remove-comments-form-group select:focus,
+.remove-comments-wrap .remove-comments-form-group input[type="text"]:focus,
+.remove-comments-wrap .remove-comments-form-group input[type="email"]:focus,
+.remove-comments-wrap .remove-comments-form-group input[type="number"]:focus,
+.remove-comments-wrap .remove-comments-form-group textarea:focus,
+.remove-comments-wrap input.remove-comments-form-input:focus {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.remove-comments-wrap .remove-comments-form-group textarea,
+.remove-comments-wrap textarea.remove-comments-form-input {
+    box-sizing: border-box;
+    width: 100%;
+    padding: 10px 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    font-size: 13px;
+    line-height: 1.6;
+}
+
+.remove-comments-wrap #ulticocl-rule-keywords {
+    font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+    font-size: 12.5px;
+}
+
+/* Helper text sits flush with the field above it, not indented like a toggle's. */
+.remove-comments-wrap .remove-comments-form-group .description,
+.ulticocl-fieldset > .description {
+    margin: 8px 0 0;
+    color: var(--uc-muted);
+    font-size: 12px;
+    font-style: normal;
+    line-height: 1.55;
+}
+
+/* The row above ends with a 20px group margin, so pull the text up to sit 8px below its fields. */
+.ulticocl-fieldset > .description { margin: -12px 0 0; }
+
+/* A sentence with a field in the middle: keep the text and the box on one centre line. */
+.remove-comments-wrap .remove-comments-form-group .description.ulticocl-inline-field {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 4px 8px;
+}
+
+/* ---- Toggle fields: switches laid out on an aligned grid ------------------ */
+
+.ulticocl-toggle-grid {
+    display: grid;
+    grid-template-columns: repeat(var(--cols, 3), minmax(0, 1fr));
+    /* 16px between columns, the same as the input grids, so column edges line up down the form. */
+    gap: 12px 16px;
+}
+
+.ulticocl-toggle-grid[data-cols="2"] { --cols: 2; }
+.ulticocl-toggle-grid[data-cols="3"] { --cols: 3; }
+.ulticocl-toggle-grid[data-cols="4"] { --cols: 4; }
+
+.ulticocl-toggle-label {
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+}
+
+.ulticocl-toggle-grid .ulticocl-toggle,
+.ulticocl-field-toggle .ulticocl-toggle {
+    box-sizing: border-box;
+    width: 100%;
+    height: var(--ulticocl-field);
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    transition: border-color 0.15s ease, background-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-toggle-grid .ulticocl-toggle:hover,
+.ulticocl-field-toggle .ulticocl-toggle:hover { border-color: var(--remove-comments-gray-400); }
+
+.ulticocl-toggle-grid .ulticocl-toggle:has(input:checked),
+.ulticocl-field-toggle .ulticocl-toggle:has(input:checked) {
+    border-color: #c7d2fe;
+    background: #f5f6ff;
+    color: #3730a3;
+}
+
+.ulticocl-toggle-grid .ulticocl-toggle:has(input:focus-visible),
+.ulticocl-field-toggle .ulticocl-toggle:has(input:focus-visible) {
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+/* The tile already shows focus, so the switch itself does not need its own ring. */
+.ulticocl-toggle input:focus + .remove-comments-toggle-slider { box-shadow: none; }
+
+@media (max-width: 600px) {
+    .ulticocl-toggle-grid[data-cols="3"],
+    .ulticocl-toggle-grid[data-cols="4"] { --cols: 2; }
+}
+
+/* ---- Rule dialog -------------------------------------------------------- */
+
+.remove-comments-modal { background: rgba(17, 24, 39, 0.55); }
+
+.remove-comments-modal-content {
+    border-radius: var(--uc-radius-lg);
+    box-shadow: var(--uc-shadow-lg);
+}
+
+.remove-comments-modal-content.ulticocl-wide { padding: 28px 28px 24px; }
+
+.remove-comments-modal-content > h2 {
+    margin: 0 0 24px;
+    padding-right: 40px;
+    color: var(--uc-ink);
+    font-size: 20px;
+    font-weight: 700;
+    letter-spacing: -0.01em;
+    line-height: 1.3;
+}
+
+.remove-comments-modal-content > .remove-comments-modal-close { top: 22px; right: 26px; }
+
+.ulticocl-fieldset {
+    margin: 0 0 20px;
+    padding: 12px 20px 20px; /* the legend sits on the top border, so less is needed above than below */
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+}
+
+.ulticocl-fieldset legend {
+    margin-left: -4px;
+    padding: 0 8px;
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 700;
+}
+
+.ulticocl-grid-2, .ulticocl-grid-3 { gap: 0 16px; }
+
+.ulticocl-modal-footer-row,
+.remove-comments-modal-content .remove-comments-form-actions {
+    align-items: center;
+    gap: 12px;
+    margin-top: 24px;
+    padding-top: 20px;
+    border-top: 1px solid var(--uc-line);
+}
+
+.remove-comments-modal-content .remove-comments-form-actions .remove-comments-btn {
+    height: var(--ulticocl-field);
+    padding: 0 18px;
+    font-size: 13px;
+    font-weight: 600;
+}
+
+.remove-comments-modal-content .remove-comments-modal-close-btn {
+    width: var(--ulticocl-field);
+    height: var(--ulticocl-field);
+    margin-left: auto;
+    border-radius: var(--uc-radius);
+}
+
+/* ---- Filter bar --------------------------------------------------------- */
+
+.ulticocl-filters {
+    gap: 12px 20px;
+    margin: 0 0 16px;
+    padding: 12px 16px;
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+}
+
+.ulticocl-filters input[type="search"],
+.ulticocl-filters input[type="date"] {
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    line-height: 1.3;
+}
+
+.ulticocl-filters input[type="search"] { flex: 1 1 260px; min-width: 200px; }
+
+.ulticocl-filters input[type="search"]:focus,
+.ulticocl-filters input[type="date"]:focus {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.ulticocl-filter-field {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    margin: 0;
+    color: var(--uc-ink-2);
+    font-size: 13px;
+    font-weight: 500;
+}
+
+.ulticocl-reset {
+    color: var(--uc-muted);
+    font-size: 13px;
+    text-decoration: none;
+}
+
+.ulticocl-reset:hover { color: var(--remove-comments-primary); text-decoration: underline; }
+
+/* ---- Status views, bulk bar and pagination ------------------------------------ */
+
+.remove-comments-comments-panel .subsubsub {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 6px;
+    float: none;
+    margin: 0 0 16px;
+    padding: 0;
+    font-size: 0; /* hides the "|" separators WordPress prints between views */
+}
+
+.remove-comments-comments-panel .subsubsub li { margin: 0; padding: 0; font-size: 0; }
+
+.remove-comments-comments-panel .subsubsub a {
+    display: inline-flex;
+    align-items: center;
+    gap: 6px;
+    height: 32px;
+    padding: 0 12px;
+    border: 1px solid transparent;
+    border-radius: var(--uc-radius);
+    color: var(--uc-ink-2);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    text-decoration: none;
+    transition: background-color 0.15s ease, color 0.15s ease;
+}
+
+.remove-comments-comments-panel .subsubsub a:hover { background: var(--remove-comments-gray-100); color: var(--uc-ink); }
+
+.remove-comments-comments-panel .subsubsub a.current {
+    border-color: #e0e7ff;
+    background: #eef2ff;
+    color: #4338ca;
+    font-weight: 600;
+}
+
+.remove-comments-comments-panel .subsubsub .count { color: var(--uc-muted); font-weight: 400; }
+.remove-comments-comments-panel .subsubsub a.current .count { color: var(--remove-comments-primary); }
+
+.remove-comments-comments-panel .tablenav {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 12px;
+    height: auto;
+    margin: 0 0 12px;
+    padding: 0;
+}
+
+.remove-comments-comments-panel .tablenav.bottom { margin: 12px 0 0; }
+.remove-comments-comments-panel .tablenav .actions { display: inline-flex; align-items: center; gap: 8px; padding: 0; overflow: visible; }
+.remove-comments-comments-panel .tablenav .alignleft,
+.remove-comments-comments-panel .tablenav .alignright { float: none; }
+
+.remove-comments-comments-panel .tablenav .actions select {
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    min-width: 170px;
+    margin: 0;
+    padding: 0 34px 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    -webkit-appearance: none;
+    appearance: none;
+    background: #fff url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20'%3E%3Cpath d='M5.5 7.5L10 12l4.5-4.5' fill='none' stroke='%236b7280' stroke-width='1.8' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E") no-repeat right 10px center / 18px;
+    color: var(--uc-ink);
+    font-size: 13px;
+    line-height: 1.3;
+}
+
+.remove-comments-comments-panel .tablenav .actions select:focus { outline: none; border-color: var(--remove-comments-primary); box-shadow: var(--uc-focus); }
+
+.remove-comments-comments-panel .tablenav-pages {
+    display: inline-flex;
+    align-items: center;
+    gap: 10px;
+    margin: 0 0 0 auto;
+    color: var(--uc-muted);
+    font-size: 13px;
+}
+
+.remove-comments-comments-panel .tablenav-pages .pagination-links { display: inline-flex; align-items: center; gap: 6px; }
+.remove-comments-comments-panel .tablenav-pages .paging-input { display: inline-flex; align-items: center; gap: 6px; margin: 0; }
+
+.remove-comments-comments-panel .tablenav-pages .button,
+.remove-comments-comments-panel .tablenav-pages .tablenav-pages-navspan {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    box-sizing: border-box;
+    min-width: var(--ulticocl-field);
+    height: var(--ulticocl-field);
+    padding: 0 10px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    font-size: 16px;
+    line-height: 1;
+}
+
+.remove-comments-comments-panel .tablenav-pages .tablenav-pages-navspan { opacity: 0.45; border-style: dashed; }
+
+.remove-comments-comments-panel .tablenav-pages .current-page {
+    box-sizing: border-box;
+    width: 52px;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 6px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    text-align: center;
+}
+
+.remove-comments-comments-panel .tablenav-pages .current-page:focus { outline: none; border-color: var(--remove-comments-primary); box-shadow: var(--uc-focus); }
+
+/* ---- The comment table --------------------------------------------------- */
+
+.remove-comments-comments-panel .wp-list-table {
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    border-collapse: separate;
+    border-spacing: 0;
+    overflow: hidden;
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+}
+
+.remove-comments-comments-panel .wp-list-table thead th,
+.remove-comments-comments-panel .wp-list-table thead td,
+.remove-comments-comments-panel .wp-list-table tfoot th,
+.remove-comments-comments-panel .wp-list-table tfoot td {
+    padding: 12px 16px;
+    border: 0;
+    border-bottom: 1px solid var(--uc-line);
+    background: #f9fafb;
+    color: var(--uc-muted);
+    font-size: 12px;
+    font-weight: 600;
+    letter-spacing: 0.04em;
+    line-height: 1.4;
+    text-transform: uppercase;
+}
+
+.remove-comments-comments-panel .wp-list-table tfoot th,
+.remove-comments-comments-panel .wp-list-table tfoot td { border-top: 1px solid var(--uc-line); border-bottom: 0; }
+
+.remove-comments-comments-panel .wp-list-table tbody th,
+.remove-comments-comments-panel .wp-list-table tbody td {
+    padding: 16px;
+    border-bottom: 1px solid var(--uc-line-soft);
+    background: transparent;
+    color: var(--uc-ink-2);
+    font-size: 13px;
+    line-height: 1.55;
+    vertical-align: top;
+}
+
+.remove-comments-comments-panel .wp-list-table tbody tr:last-child th,
+.remove-comments-comments-panel .wp-list-table tbody tr:last-child td { border-bottom: 0; }
+
+/* No zebra stripes: the hairlines carry the structure. */
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr,
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr:nth-child(odd) { background: #fff; }
+
+.remove-comments-comments-panel .wp-list-table tbody tr { transition: background-color 0.12s ease; }
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr:hover { background: #fafbff; }
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr:has(.check-column input:checked) { background: #f5f6ff; }
+
+.remove-comments-comments-panel .wp-list-table .check-column {
+    width: 44px;
+    padding: 16px 0 0 16px;
+    vertical-align: top;
+}
+
+.remove-comments-comments-panel .wp-list-table thead .check-column,
+.remove-comments-comments-panel .wp-list-table tfoot .check-column { padding: 12px 0 12px 16px; vertical-align: middle; }
+
+/* The comment is what people read, so it gets the room; the rest stay compact. */
+.remove-comments-comments-panel .wp-list-table .column-author { width: 17%; }
+.remove-comments-comments-panel .wp-list-table .column-comment { width: 40%; }
+.remove-comments-comments-panel .wp-list-table .column-post,
+.remove-comments-comments-panel .wp-list-table .column-caught { width: 17%; }
+.remove-comments-comments-panel .wp-list-table .column-purge,
+.remove-comments-comments-panel .wp-list-table .column-date { width: 120px; }
+
+.remove-comments-comments-panel .wp-list-table .ulticocl-date { display: block; color: var(--uc-ink-2); white-space: nowrap; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-time { display: block; margin-top: 2px; color: var(--uc-muted); font-size: 12px; }
+
+/* Author cell: name, then quiet detail lines with an even 2px between them. */
+.remove-comments-comments-panel .wp-list-table .ulticocl-author-name { margin: 0; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-author-line { display: block; margin-top: 2px; color: var(--uc-muted); font-size: 12.5px; overflow-wrap: anywhere; }
+.remove-comments-comments-panel .wp-list-table code.ulticocl-author-line { display: inline-block; margin-top: 8px; }
+
+/* Comment cell: status, text, signals, actions, each separated by the same step. */
+.remove-comments-comments-panel .wp-list-table .ulticocl-comment-status { margin-bottom: 8px; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-comment-text { color: var(--uc-ink); overflow-wrap: anywhere; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-chips { display: flex; flex-wrap: wrap; gap: 6px; margin-top: 8px; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-chip { margin: 0; white-space: nowrap; }
+
+.remove-comments-comments-panel .wp-list-table .column-author strong { display: block; margin-bottom: 2px; color: var(--uc-ink); font-size: 13.5px; }
+.remove-comments-comments-panel .wp-list-table .column-author code { padding: 1px 6px; border-radius: var(--uc-radius); background: var(--remove-comments-gray-100); color: var(--uc-ink-2); font-size: 12px; }
+.remove-comments-comments-panel .wp-list-table .column-author a,
+.remove-comments-comments-panel .wp-list-table .column-post a { color: var(--remove-comments-primary); text-decoration: none; }
+.remove-comments-comments-panel .wp-list-table .column-author a:hover,
+.remove-comments-comments-panel .wp-list-table .column-post a:hover { color: var(--remove-comments-primary-dark); text-decoration: underline; }
+
+.remove-comments-comments-panel .wp-list-table .column-comment { color: var(--uc-ink); }
+.remove-comments-comments-panel .wp-list-table .column-caught strong { color: var(--uc-ink); }
+
+.remove-comments-comments-panel .wp-list-table .row-actions { margin-top: 6px; padding: 0; color: var(--remove-comments-gray-300); font-size: 12px; }
+.remove-comments-comments-panel .wp-list-table .row-actions a { color: var(--remove-comments-primary); font-weight: 500; text-decoration: none; }
+.remove-comments-comments-panel .wp-list-table .row-actions a:hover { text-decoration: underline; }
+.remove-comments-comments-panel .wp-list-table .row-actions .delete a,
+.remove-comments-comments-panel .wp-list-table .row-actions .submitdelete { color: #b91c1c; }
+
+.remove-comments-comments-panel .wp-list-table tr.no-items td { padding: 48px 16px; color: var(--uc-muted); font-size: 14px; text-align: center; }
+
+/* Brand checkboxes for the table, so the select boxes match the switches elsewhere. */
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"] {
+    -webkit-appearance: none;
+    appearance: none;
+    position: relative;
+    flex: none;
+    width: 16px;
+    height: 16px;
+    margin: 0;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: 4px;
+    background: #fff;
+    box-shadow: none;
+    vertical-align: middle;
+    cursor: pointer;
+    transition: background-color 0.15s ease, border-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]:hover { border-color: var(--remove-comments-primary); }
+
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]:checked {
+    border-color: var(--remove-comments-primary);
+    background: var(--remove-comments-primary) url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'%3E%3Cpath d='M4 8.5l2.7 2.7L12 5.5' fill='none' stroke='%23fff' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E") center / 12px no-repeat;
+}
+
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]::before { content: none !important; display: none !important; }
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]:focus { outline: none; box-shadow: var(--uc-focus); }
+
+.remove-comments-comments-panel .notice.inline { margin: 0 0 16px; border-radius: var(--uc-radius); }
+
+/* ---- Smart Rules page ------------------------------------------------------ */
+
+.ulticocl-rules-toolbar {
+    display: flex;
+    align-items: center;
+    gap: 16px;
+    margin: 0 0 20px;
+}
+
+.ulticocl-rules-toolbar .ulticocl-presets { flex: 1; min-width: 0; margin: 0; }
+
+/* The one primary action on the page. */
+.ulticocl-add-btn {
+    display: inline-flex;
+    flex: none;
+    align-items: center;
+    gap: 8px;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 18px;
+    border: 1px solid var(--remove-comments-primary);
+    border-radius: var(--uc-radius);
+    background: var(--remove-comments-primary);
+    color: #fff;
+    font-size: 13px;
+    font-weight: 600;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    box-shadow: 0 1px 2px rgba(99, 102, 241, 0.35);
+    transition: background-color 0.15s ease, border-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-add-btn .dashicons { width: 16px; height: 16px; font-size: 16px; }
+
+.ulticocl-add-btn:hover { border-color: var(--remove-comments-primary-dark); background: var(--remove-comments-primary-dark); }
+.ulticocl-add-btn:focus-visible { outline: none; box-shadow: var(--uc-focus); }
+
+@media (max-width: 782px) {
+    .ulticocl-rules-toolbar { flex-direction: column; align-items: stretch; }
+    .ulticocl-add-btn { justify-content: center; }
+}
+
+.remove-comments-triggers-list { display: flex; flex-direction: column; gap: 16px; margin: 0; }
+
+.ulticocl-rule {
+    padding: 20px 24px;
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+    transition: border-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-rule:hover { border-color: var(--remove-comments-gray-300); box-shadow: 0 6px 16px rgba(17, 24, 39, 0.06); }
+
+.ulticocl-rule-head {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 16px;
+    margin-bottom: 16px;
+}
+
+.ulticocl-rule-head h3 { margin: 0; padding: 0; color: var(--uc-ink); font-size: 16px; font-weight: 600; line-height: 1.3; }
+.ulticocl-rule-badges { display: flex; flex: none; align-items: center; gap: 8px; }
+
+.ulticocl-rule-meta {
+    display: grid;
+    grid-template-columns: repeat(3, minmax(0, 1fr));
+    gap: 16px 24px;
+    margin: 0 0 20px;
+    padding: 0;
+}
+
+.ulticocl-rule-meta > div { min-width: 0; }
+.ulticocl-rule-meta > .is-wide { grid-column: 1 / -1; }
+
+.ulticocl-rule-meta dt {
+    margin: 0 0 4px;
+    color: var(--uc-muted);
+    font-size: 11px;
+    font-weight: 600;
+    letter-spacing: 0.06em;
+    text-transform: uppercase;
+}
+
+.ulticocl-rule-meta dd { margin: 0; color: var(--uc-ink); font-size: 13px; line-height: 1.5; overflow-wrap: anywhere; }
+
+.ulticocl-rule-actions {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 8px;
+    padding-top: 16px;
+    border-top: 1px solid var(--uc-line-soft);
+}
+
+.ulticocl-rbtn {
+    display: inline-flex;
+    align-items: center;
+    gap: 6px;
+    height: 36px;
+    margin: 0;
+    padding: 0 14px 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    transition: background-color 0.15s ease, border-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-rbtn .dashicons { width: 16px; height: 16px; font-size: 16px; color: var(--uc-muted); transition: color 0.15s ease; }
+
+.ulticocl-rbtn:hover { border-color: var(--remove-comments-primary); background: #f7f7ff; color: var(--remove-comments-primary-dark); }
+.ulticocl-rbtn:hover .dashicons { color: var(--remove-comments-primary); }
+.ulticocl-rbtn:focus-visible { outline: none; border-color: var(--remove-comments-primary); box-shadow: var(--uc-focus); }
+
+.ulticocl-rbtn.is-primary { border-color: var(--remove-comments-primary); background: var(--remove-comments-primary); color: #fff; }
+.ulticocl-rbtn.is-primary .dashicons { color: #fff; }
+.ulticocl-rbtn.is-primary:hover { border-color: var(--remove-comments-primary-dark); background: var(--remove-comments-primary-dark); color: #fff; }
+
+/* Delete sits apart at the far end and stays quiet until hovered. */
+.ulticocl-rbtn.is-danger { margin-left: auto; border-color: transparent; background: transparent; color: #b91c1c; }
+.ulticocl-rbtn.is-danger .dashicons { color: #b91c1c; }
+.ulticocl-rbtn.is-danger:hover { border-color: #fecaca; background: #fef2f2; color: #991b1b; }
+.ulticocl-rbtn.is-danger:focus-visible { box-shadow: 0 0 0 3px rgba(239, 68, 68, 0.25); }
+
+.ulticocl-badge { display: inline-flex; align-items: center; gap: 6px; }
+.ulticocl-badge-on { background: #d1fae5; color: #065f46; }
+.ulticocl-badge-off { background: var(--remove-comments-gray-100); color: var(--uc-ink-2); }
+.ulticocl-badge-on::before,
+.ulticocl-badge-off::before { content: ""; width: 6px; height: 6px; border-radius: 50%; background: currentColor; }
+
+.remove-comments-empty-state {
+    padding: 40px 24px;
+    border: 1px dashed var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius-lg);
+    background: var(--remove-comments-gray-50);
+    color: var(--uc-muted);
+    text-align: center;
+}
+
+.remove-comments-empty-state p { margin: 0; font-size: 14px; }
+
+@media (max-width: 782px) {
+    .ulticocl-rule-meta { grid-template-columns: 1fr; }
+    .ulticocl-rule-head { align-items: flex-start; flex-direction: column; gap: 8px; }
+}
+
+/* ---- Bulk Clean and Settings: same cards, switches and footer as the rest ------------- */
+
+/* Every on/off switch in the plugin is the small brand switch. */
+.remove-comments-toggle-switch { width: 32px; height: 18px; }
+.remove-comments-toggle-slider { border-radius: 18px; }
+
+.remove-comments-toggle-slider:before {
+    width: 12px;
+    height: 12px;
+    left: 3px;
+    bottom: 3px;
+    box-shadow: 0 1px 2px rgba(0, 0, 0, 0.25);
+}
+
+.remove-comments-toggle-switch input:checked + .remove-comments-toggle-slider:before { transform: translateX(14px); }
+
+.remove-comments-toggle-label {
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1.3;
+}
+
+/* Sections become cards, like the dashboard's. */
+.remove-comments-form-section {
+    margin: 0 0 16px;
+    padding: 20px 24px;
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+}
+
+.remove-comments-form-section h3 {
+    margin: 0 0 16px;
+    padding: 0;
+    border: 0;
+    color: var(--uc-ink);
+    font-size: 15px;
+    font-weight: 600;
+    line-height: 1.3;
+}
+
+.remove-comments-form-section > :last-child,
+.remove-comments-form-section > .remove-comments-form-group:last-child { margin-bottom: 0; }
+.remove-comments-form-section .ulticocl-grid-2 > .remove-comments-form-group { margin-bottom: 0; }
+.remove-comments-form-section .ulticocl-row-after-toggles { margin-top: 16px; }
+
+/* Switch groups become the same aligned tiles as in the rule dialog. */
+.remove-comments-form-section .remove-comments-checkbox-group {
+    display: grid;
+    grid-template-columns: repeat(auto-fill, minmax(190px, 1fr));
+    gap: 12px 16px;
+    margin: 0;
+}
+
+.remove-comments-form-section .remove-comments-checkbox-group label {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    cursor: pointer;
+    transition: border-color 0.15s ease, background-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-form-section .remove-comments-checkbox-group label:hover { border-color: var(--remove-comments-gray-400); background: #fff; }
+
+.remove-comments-form-section .remove-comments-checkbox-group label:has(input:checked) {
+    border-color: #c7d2fe;
+    background: #f5f6ff;
+}
+
+.remove-comments-form-section .remove-comments-checkbox-group label:has(input:checked) .remove-comments-toggle-label { color: #3730a3; }
+
+.remove-comments-form-section .remove-comments-checkbox-group label:has(input:focus-visible) {
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.remove-comments-checkbox-group .remove-comments-toggle-label { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+
+/* Date range: two fields on the same 16px grid as everything else. */
+.remove-comments-date-range { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 0 16px; }
+
+.remove-comments-date-input label {
+    display: block;
+    margin: 0 0 8px;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 600;
+}
+
+.remove-comments-wrap .remove-comments-date-input input[type="date"] {
+    box-sizing: border-box;
+    width: 100%;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    line-height: 1.3;
+}
+
+.remove-comments-wrap .remove-comments-date-input input[type="date"]:focus {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+/* Settings: a switch, its label, and helper text lined up under the label. */
+.remove-comments-wrap .remove-comments-form-group > label:has(.remove-comments-toggle-switch) { gap: 12px; }
+
+.remove-comments-wrap .remove-comments-form-group > label:has(.remove-comments-toggle-switch) + .description {
+    margin: 4px 0 0 44px; /* 32px switch + 12px gap, so the text sits under its label */
+}
+
+.remove-comments-wrap #ulticocl_quarantine_days {
+    box-sizing: border-box;
+    width: 110px;
+    height: var(--ulticocl-field);
+    padding: 0 12px;
+}
+
+/* ---- Form footer: secondary actions left, the one primary action right ------------------- */
+
+.remove-comments-form-actions {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 12px;
+    margin-top: 8px;
+    padding-top: 20px;
+    border-top: 1px solid var(--uc-line);
+}
+
+.remove-comments-form-actions .remove-comments-btn {
+    height: var(--ulticocl-field);
+    padding: 0 18px;
+    font-size: 13px;
+    font-weight: 600;
+}
+
+.ulticocl-form-footer .ulticocl-rbtn { height: var(--ulticocl-field); padding: 0 16px 0 14px; }
+.ulticocl-form-footer .ulticocl-apply { margin-left: auto; }
+
+/* The Apply button turns red when the chosen action cannot be undone. */
+.ulticocl-apply[data-action="delete"] {
+    border-color: var(--remove-comments-danger);
+    background: var(--remove-comments-danger);
+    box-shadow: 0 1px 2px rgba(239, 68, 68, 0.35);
+}
+
+.ulticocl-apply[data-action="delete"]:hover { border-color: #dc2626; background: #dc2626; }
+.ulticocl-apply[data-action="delete"]:focus-visible { box-shadow: 0 0 0 3px rgba(239, 68, 68, 0.25); }
+
+.remove-comments-preview-result {
+    margin-top: 16px;
+    padding: 12px 16px;
+    border: 1px solid #bfdbfe;
+    border-left: 4px solid var(--remove-comments-info);
+    border-radius: var(--uc-radius);
+    background: #f5f9ff;
+    color: var(--uc-ink);
+    font-size: 13px;
+}
+
+@media (max-width: 782px) {
+    .remove-comments-date-range { grid-template-columns: 1fr; gap: 16px; }
+    .ulticocl-form-footer .ulticocl-apply { margin-left: 0; width: 100%; justify-content: center; }
+}
+
+/* ---- Card rhythm: one 16px gap, whatever is inside (also holds when a field is hidden) ---- */
+
+.remove-comments-form-section { display: flex; flex-direction: column; gap: 16px; }
+.remove-comments-form-section > * { margin: 0; }
+.remove-comments-form-section > .remove-comments-form-group { margin: 0; }
+.remove-comments-form-section .ulticocl-row-after-toggles { margin-top: 0; }
+.remove-comments-form-section h3 { margin: 0; }
+
+.remove-comments-panel-header p { max-width: 84ch; }
+
+/* Settings switch rows: the helper text sits right under its label. */
+.remove-comments-wrap .remove-comments-form-group > label:has(.remove-comments-toggle-switch) { margin-bottom: 0; }
+
+/* Label -> control is 8px everywhere: the date fields were adding a flex gap on top of the label margin. */
+.remove-comments-date-input { gap: 0; }
+
+/* Helper text hugs the select it explains instead of floating a full row below it. */
+.remove-comments-form-section > .description { margin-top: -8px; }
+
+/* ---- Phones: one column of tiles, full-width actions, snugger cards ------------------------ */
+
+@media (max-width: 600px) {
+    .remove-comments-form-section { padding: 16px; }
+    .remove-comments-form-section .ulticocl-toggle-grid[data-cols] { --cols: 1; }
+    .remove-comments-form-section .ulticocl-toggle-label { white-space: normal; line-height: 1.2; }
+    .remove-comments-form-section .ulticocl-grid-2 { grid-template-columns: 1fr; }
+
+    .ulticocl-form-footer { flex-direction: column; align-items: stretch; }
+    .ulticocl-form-footer > button { width: 100%; justify-content: center; }
+}
+
+/* ---- Rule dialog: the on/off switch is a status card, not a footnote ----------------------- */
+
+.remove-comments-toggle-switch.ulticocl-large { flex: none; width: 44px; height: 24px; }
+.ulticocl-large .remove-comments-toggle-slider { border-radius: 24px; }
+
+.ulticocl-large .remove-comments-toggle-slider:before {
+    width: 18px;
+    height: 18px;
+    left: 3px;
+    bottom: 3px;
+}
+
+.ulticocl-large input:checked + .remove-comments-toggle-slider:before { transform: translateX(20px); }
+
+.remove-comments-modal .ulticocl-status-card {
+    display: flex;
+    align-items: center;
+    gap: 16px;
+    box-sizing: border-box;
+    margin: 0 0 20px;
+    padding: 14px 16px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: var(--remove-comments-gray-50);
+    cursor: pointer;
+    transition: border-color 0.15s ease, background-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-modal .ulticocl-status-card:hover { border-color: var(--remove-comments-gray-400); }
+
+.remove-comments-modal .ulticocl-status-card:has(input:checked) {
+    border-color: #c7d2fe;
+    background: #f5f6ff;
+}
+
+.remove-comments-modal .ulticocl-status-card:has(input:focus-visible) {
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.ulticocl-status-text { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+
+.ulticocl-status-title { color: var(--uc-ink); font-size: 14px; font-weight: 600; line-height: 1.3; }
+.ulticocl-status-card:has(input:checked) .ulticocl-status-title { color: #3730a3; }
+
+.ulticocl-status-help { color: var(--uc-muted); font-size: 12.5px; line-height: 1.5; }

ultimate-comment-cleaner/tags/1.1.0/assets/js/admin.js

@@ -1 +1 @@
 jQuery(document).ready(function($) {
     'use strict';
-    
+
+    const { __, _n, sprintf } = wp.i18n;
+    const td = 'ultimate-comment-cleaner';
+
     // Helper function to show native alert
     function showAlert(message, type) {
         if (type === 'error') {
-            alert('Error: ' + message);
-        } else if (type === 'success') {
-            alert('Success: ' + message);
+            alert(sprintf(__('Error: %s', td), message));
         } else {
             alert(message);
         }
     }
-    
-    // Helper function to show native confirm
-    function showConfirm(message, callback) {
-        if (confirm(message)) {
-            if (callback) callback();
-        }
-    }
-    
-    // Delete Comments Form
+
+    function errorMessage(response) {
+        return (response && response.data && response.data.message) || __('An error occurred. Please try again.', td);
+    }
+
+    function post(data) {
+        return $.post(ulticoclData.ajaxurl, $.extend({ nonce: ulticoclData.nonce }, data));
+    }
+
+    function isOn(value) {
+        return value === true || value === 1 || value === '1';
+    }
+
+    // ---------------------------------------------------------------------
+    // Bulk Clean: count first, confirm with the real number, then work in batches
+    // ---------------------------------------------------------------------
+
+    function confirmText(action, count) {
+        const n = count.toLocaleString();
+        if (action === 'delete') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Permanently delete %s comment? This cannot be undone.', 'Permanently delete %s comments? This cannot be undone.', count, td), n);
+        }
+        if (action === 'spam') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Mark %s comment as spam?', 'Mark %s comments as spam?', count, td), n);
+        }
+        /* translators: %s: number of comments */
+        return sprintf(_n('Move %s comment to quarantine? You can restore it from the Quarantine tab.', 'Move %s comments to quarantine? You can restore them from the Quarantine tab.', count, td), n);
+    }
+
+    function runBulk(filters) {
+        post($.extend({ action: 'ulticocl_preview_count' }, filters)).done(function(response) {
+            if (!response.success) {
+                showAlert(errorMessage(response), 'error');
+                return;
+            }
+            const count = response.data.count;
+            if (count === 0) {
+                showAlert(__('No comments match your criteria.', td));
+                return;
+            }
+            if (confirm(confirmText(filters.clean_action, count))) {
+                processBulk(filters, count);
+            }
+        }).fail(function() {
+            showAlert(__('An error occurred. Please try again.', td), 'error');
+        });
+    }
+
+    function processBulk(filters, expected) {
+        const progress = $('<div>').addClass('ulticocl-progress-box').attr('role', 'status');
+        $('body').append(progress);
+
+        function step(processedSoFar) {
+            progress.text(sprintf(
+                /* translators: 1: comments processed so far, 2: total comments */
+                __('Working... %1$s of %2$s', td),
+                processedSoFar.toLocaleString(),
+                expected.toLocaleString()
+            ));
+            post($.extend({ action: 'ulticocl_bulk_process', processed_so_far: processedSoFar }, filters)).done(function(response) {
+                if (!response.success) {
+                    progress.remove();
+                    showAlert(errorMessage(response), 'error');
+                    return;
+                }
+                if (!response.data.done) {
+                    step(response.data.total);
+                    return;
+                }
+                progress.remove();
+                let message = response.data.message;
+                if (response.data.remaining > 0) {
+                    message += '\n' + sprintf(
+                        /* translators: %s: number of comments */
+                        __('%s matching comments could not be changed.', td),
+                        response.data.remaining.toLocaleString()
+                    );
+                }
+                showAlert(message);
+                location.reload();
+            }).fail(function() {
+                progress.remove();
+                showAlert(__('An error occurred while processing comments.', td), 'error');
+            });
+        }
+
+        step(0);
+    }
+
     $('#remove-comments-delete-form').on('submit', function(e) {
         e.preventDefault();
-        
-        const formData = $(this).serialize();
-        const selectedStatus = $('input[name="status[]"]:checked').length;
-        
-        if (selectedStatus === 0) {
-            showAlert('Please select at least one status to delete.', 'error');
+
+        if ($('input[name="status[]"]:checked').length === 0) {
+            showAlert(__('Please select at least one status.', td), 'error');
             return;
         }
-        
-        showConfirm('Are you sure? This will permanently delete the selected comments. This action cannot be undone!', function() {
-            deleteComments(formData);
-        });
-    });
-    
+        runBulk(getFormData());
+    });
+
+    // Quarantine tab: delete everything quarantined
+    $('#ulticocl-empty-quarantine').on('click', function() {
+        runBulk({ status: ['quarantine'], clean_action: 'delete' });
+    });
+
     // Preview Count
     $('#remove-comments-preview-count').on('click', function() {
-        const formData = $('#remove-comments-delete-form').serialize() + '&action=ulticocl_preview_count';
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'ulticocl_preview_count',
-                nonce: ulticoclData.nonce,
-                ...getFormData()
-            },
-            beforeSend: function() {
-                $('#remove-comments-preview-count').prop('disabled', true).text('Counting...');
-            },
-            success: function(response) {
-                if (response.success) {
-                    $('#remove-comments-preview-result').html(
-                        `Found <strong>${response.data.count}</strong> comments matching your criteria.`
-                    ).show();
-                } else {
-                    showAlert(response.data.message || 'An error occurred.', 'error');
-                }
-            },
-            complete: function() {
-                $('#remove-comments-preview-count').prop('disabled', false).text('Preview Count');
-            }
-        });
-    });
-    
+        const button = $(this);
+        const label = button.find('.ulticocl-btn-label');
+        const originalText = label.text();
+        button.prop('disabled', true);
+        label.text(__('Counting...', td));
+
+        post($.extend({ action: 'ulticocl_preview_count' }, getFormData())).done(function(response) {
+            if (response.success) {
+                const count = response.data.count;
+                $('#remove-comments-preview-result').text(sprintf(
+                    /* translators: %s: number of comments */
+                    _n('Found %s comment matching your criteria.', 'Found %s comments matching your criteria.', count, td),
+                    count.toLocaleString()
+                )).show();
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        }).always(function() {
+            button.prop('disabled', false);
+            label.text(originalText);
+        });
+    });
+
+    // Bulk Clean: describe what the chosen action does, and let the button's colour follow the consequence.
+    (function() {
+        const select = $('#remove-comments-clean-action');
+        if (!select.length) {
+            return;
+        }
+        const help = {
+            quarantine: __('Hidden from your site. You can restore them from the Quarantine tab.', td),
+            spam: __('Moved to the spam folder.', td),
+            'delete': __('Removed permanently. This cannot be undone.', td)
+        };
+        const sync = function() {
+            const action = select.val();
+            $('#ulticocl-action-help').text(help[action] || '');
+            $('#remove-comments-delete-btn').attr('data-action', action);
+        };
+        select.on('change', sync);
+        sync();
+    })();
+
     // Export Comments
     $('#remove-comments-export-btn, #remove-comments-export-all').on('click', function() {
         const formData = getFormData();
+        delete formData.clean_action;
         formData.action = 'ulticocl_export_comments';
         formData.nonce = ulticoclData.nonce;
-        
+        // The dashboard button has no filter form: export everything.
+        if (!formData.status) {
+            formData.status = ['all'];
+        }
+
         // Create form and submit
         const form = $('<form>', {
@@ -79 +181 @@
             target: '_blank'
         });
-        
+
         Object.keys(formData).forEach(key => {
-            form.append($('<input>', {
-                type: 'hidden',
-                name: key,
-                value: formData[key]
-            }));
-        });
-        
+            // Arrays must be sent as key[] so PHP receives them as arrays.
+            [].concat(formData[key]).forEach(value => {
+                form.append($('<input>', {
+                    type: 'hidden',
+                    name: Array.isArray(formData[key]) ? key + '[]' : key,
+                    value: value
+                }));
+            });
+        });
+
         $('body').append(form);
         form.submit();
         form.remove();
     });
-    
-    // Add Trigger
-    $('#remove-comments-add-trigger').on('click', function() {
-        $('#remove-comments-trigger-form')[0].reset();
-        $('#remove-comments-trigger-id').val('');
-        $('#remove-comments-trigger-modal').show();
-    });
-    
-    // Edit Trigger
-    $(document).on('click', '.remove-comments-edit-trigger', function() {
-        const triggerId = $(this).data('id');
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'ulticocl_get_trigger',
-                nonce: ulticoclData.nonce,
-                trigger_id: triggerId
-            },
-            success: function(response) {
-                if (response.success) {
-                    const trigger = response.data;
-                    $('#remove-comments-trigger-id').val(triggerId);
-                    $('#remove-comments-trigger-name').val(trigger.name);
-                    $('#remove-comments-trigger-status').val(trigger.status);
-                    $('#remove-comments-trigger-older').val(trigger.older_than);
-                    $('#remove-comments-trigger-schedule').val(trigger.schedule);
-                    $('#remove-comments-trigger-active').prop('checked', trigger.active);
-                    $('#remove-comments-trigger-modal').show();
-                }
-            }
-        });
-    });
-    
-    // Delete Trigger
-    $(document).on('click', '.remove-comments-delete-trigger', function() {
-        const triggerId = $(this).data('id');
-        
-        showConfirm('Are you sure you want to delete this trigger?', function() {
-            $.ajax({
-                url: ulticoclData.ajaxurl,
-                type: 'POST',
-                data: {
-                    action: 'ulticocl_delete_trigger',
-                    nonce: ulticoclData.nonce,
-                    trigger_id: triggerId
-                },
-                success: function(response) {
-                    if (response.success) {
-                        showAlert('Trigger has been deleted.', 'success');
-                        location.reload();
-                    } else {
-                        showAlert(response.data.message || 'An error occurred.', 'error');
-                    }
-                }
-            });
-        });
-    });
-    
-    // Save Trigger
-    $('#remove-comments-trigger-form').on('submit', function(e) {
-        e.preventDefault();
-        
-        const formData = {
-            action: 'ulticocl_save_trigger',
-            nonce: ulticoclData.nonce,
-            trigger_id: $('#remove-comments-trigger-id').val(),
-            name: $('#remove-comments-trigger-name').val(),
-            status: $('#remove-comments-trigger-status').val(),
-            older_than: $('#remove-comments-trigger-older').val(),
-            schedule: $('#remove-comments-trigger-schedule').val(),
-            active: $('#remove-comments-trigger-active').is(':checked') ? 1 : 0
-        };
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: formData,
-            success: function(response) {
-                if (response.success) {
-                    showAlert('Trigger has been saved successfully.', 'success');
-                    setTimeout(function() {
-                        location.reload();
-                    }, 1000);
-                } else {
-                    showAlert(response.data.message || 'An error occurred.', 'error');
-                }
-            }
-        });
-    });
-    
-    // Close Modal
-    $('.remove-comments-modal-close').on('click', function() {
-        $('#remove-comments-trigger-modal').hide();
-    });
-    
-    // Close modal on outside click
-    $(window).on('click', function(e) {
-        if ($(e.target).hasClass('rc-modal')) {
-            $('.remove-comments-modal').hide();
-        }
-    });
-    
-    // Helper Functions
-    function deleteComments(formData) {
-        const data = {
-            action: 'ulticocl_delete_comments',
-            nonce: ulticoclData.nonce,
-            ...getFormData()
-        };
-        
-        // Show loading message
-        const loadingMsg = $('<div>').text('Deleting comments... Please wait.').css({
-            position: 'fixed',
-            top: '50%',
-            left: '50%',
-            transform: 'translate(-50%, -50%)',
-            background: '#fff',
-            padding: '20px',
-            border: '2px solid #6366f1',
-            borderRadius: '4px',
-            zIndex: 9999,
-            boxShadow: '0 4px 6px rgba(0,0,0,0.1)'
-        });
-        $('body').append(loadingMsg);
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: data,
-            success: function(response) {
-                loadingMsg.remove();
-                if (response.success) {
-                    showAlert(response.data.message, 'success');
-                    setTimeout(function() {
-                        location.reload();
-                    }, 1000);
-                } else {
-                    showAlert(response.data.message || 'An error occurred.', 'error');
-                }
-            },
-            error: function() {
-                loadingMsg.remove();
-                showAlert('An error occurred while deleting comments.', 'error');
-            }
-        });
-    }
-    
+
     function getFormData() {
         const data = {};
-        
+
         // Get status checkboxes
         const statuses = [];
@@ -252 +209 @@
             data.status = statuses;
         }
-        
+
         // Get date range
         const dateFrom = $('#remove-comments-date-from').val();
@@ -258 +215 @@
         if (dateFrom) data.date_from = dateFrom;
         if (dateTo) data.date_to = dateTo;
-        
+
         // Get post types
         const postTypes = [];
@@ -267 +224 @@
             data.post_type = postTypes;
         }
-        
+
         // Get author
         const author = $('#remove-comments-author-filter').val();
@@ -273 +230 @@
             data.author = author;
         }
-        
+
+        // Search text
+        const search = $('#remove-comments-search').val();
+        if (search && search.trim() !== '') {
+            data.search = search.trim();
+        }
+
         // Additional filters
         if ($('input[name="has_url"]').is(':checked')) {
@@ -284 +247 @@
             data.short_comments = 1;
         }
-        
+
         const minWords = $('input[name="min_words"]').val();
         const maxWords = $('input[name="max_words"]').val();
         if (minWords) data.min_words = minWords;
         if (maxWords) data.max_words = maxWords;
-        
+
+        data.clean_action = $('#remove-comments-clean-action').val() || 'quarantine';
+
         return data;
     }
-    
-    // Auto-refresh stats every 30 seconds on dashboard
-    if ($('.remove-comments-dashboard').length) {
-        setInterval(function() {
-            $.ajax({
-                url: ulticoclData.ajaxurl,
-                type: 'POST',
-                data: {
-                    action: 'ulticocl_get_stats',
-                    nonce: ulticoclData.nonce
-                },
-                success: function(response) {
-                    if (response.success) {
-                        updateStats(response.data);
-                    }
-                }
+
+    // ---------------------------------------------------------------------
+    // Smart Rules
+    // ---------------------------------------------------------------------
+
+    const $modal = $('#ulticocl-rule-modal');
+    const $form = $('#ulticocl-rule-form');
+    const $result = $('#ulticocl-scan-result');
+
+    function setChecks(name, values) {
+        values = [].concat(values || []);
+        $form.find('input[name="' + name + '[]"]').each(function() {
+            $(this).prop('checked', values.indexOf($(this).val()) !== -1);
+        });
+    }
+
+    function checked(name) {
+        return $form.find('input[name="' + name + '[]"]:checked').map(function() {
+            return this.value;
+        }).get();
+    }
+
+    function toggleScope() {
+        $('.ulticocl-existing-only').toggle($('#ulticocl-rule-scope').val() !== 'new');
+    }
+
+    // The status card reads "active" or "paused" to match the switch.
+    function syncStatusCard() {
+        const on = $('#ulticocl-rule-active').is(':checked');
+        $('.ulticocl-status-title, .ulticocl-status-help').each(function() {
+            $(this).text($(this).attr(on ? 'data-on' : 'data-off'));
+        });
+    }
+
+    function fillRuleForm(rule, title) {
+        rule = $.extend({}, ulticoclData.ruleDefaults, rule);
+        $('#ulticocl-rule-title').text(title);
+        $('#ulticocl-rule-id').val(rule.id || '');
+        $('#ulticocl-rule-name').val(rule.name);
+        $('#ulticocl-rule-scope').val(rule.scope);
+        $('#ulticocl-rule-action').val(rule.action);
+        $('#ulticocl-rule-mode').val(rule.mode);
+        $('#ulticocl-rule-schedule').val(rule.schedule);
+        $('#ulticocl-rule-keywords').val([].concat(rule.keywords || []).join('\n'));
+        setChecks('fields', rule.fields);
+        setChecks('scripts', rule.scripts);
+        setChecks('status', rule.status);
+        $('#ulticocl-rule-pct').val(rule.script_min_pct);
+        $('#ulticocl-rule-links').val(rule.min_links);
+        $('#ulticocl-rule-words').val(rule.max_words);
+        $('#ulticocl-rule-older').val(rule.older_than);
+        $('#ulticocl-rule-has-url').prop('checked', isOn(rule.has_url));
+        $('#ulticocl-rule-active').prop('checked', isOn(rule.active));
+        syncStatusCard();
+        toggleScope();
+        $modal.show();
+        $('#ulticocl-rule-name').trigger('focus');
+    }
+
+    function rulePayload() {
+        return {
+            rule_id: $('#ulticocl-rule-id').val(),
+            name: $('#ulticocl-rule-name').val(),
+            scope: $('#ulticocl-rule-scope').val(),
+            rule_action: $('#ulticocl-rule-action').val(),
+            mode: $('#ulticocl-rule-mode').val(),
+            schedule: $('#ulticocl-rule-schedule').val(),
+            keywords: $('#ulticocl-rule-keywords').val(),
+            fields: checked('fields'),
+            scripts: checked('scripts'),
+            status: checked('status'),
+            script_min_pct: $('#ulticocl-rule-pct').val(),
+            min_links: $('#ulticocl-rule-links').val(),
+            max_words: $('#ulticocl-rule-words').val(),
+            older_than: $('#ulticocl-rule-older').val(),
+            has_url: $('#ulticocl-rule-has-url').is(':checked') ? 1 : 0,
+            active: $('#ulticocl-rule-active').is(':checked') ? 1 : 0
+        };
+    }
+
+    $('#ulticocl-rule-scope').on('change', toggleScope);
+    $('#ulticocl-rule-active').on('change', syncStatusCard);
+
+    $('#ulticocl-add-rule').on('click', function() {
+        fillRuleForm({}, __('New Smart Rule', td));
+    });
+
+    // Quick-start presets sit in one row that glides left and right with the pointer.
+    (function() {
+        const viewport = document.getElementById('ulticocl-presets');
+        if (!viewport) {
+            return;
+        }
+        const reduceMotion = window.matchMedia && window.matchMedia('(prefers-reduced-motion: reduce)').matches;
+        let target = 0;
+        let frame = 0;
+        const range = function() {
+            return viewport.scrollWidth - viewport.clientWidth;
+        };
+        // Fade the side that still has buttons behind it.
+        const edges = function() {
+            viewport.classList.toggle('has-left', viewport.scrollLeft > 2);
+            viewport.classList.toggle('has-right', viewport.scrollLeft < range() - 2);
+        };
+        const glide = function() {
+            const diff = target - viewport.scrollLeft;
+            if (Math.abs(diff) < 0.5) {
+                viewport.scrollLeft = target;
+                frame = 0;
+                return;
+            }
+            viewport.scrollLeft += diff * 0.14;
+            frame = requestAnimationFrame(glide);
+        };
+        viewport.addEventListener('pointermove', function(event) {
+            if (event.pointerType === 'touch' || range() <= 0) {
+                return; // touch scrolls natively
+            }
+            const box = viewport.getBoundingClientRect();
+            // The outer 12% on each side is the dead zone that reaches the first and last button.
+            const ratio = Math.min(1, Math.max(0, ((event.clientX - box.left) / box.width - 0.12) / 0.76));
+            target = ratio * range();
+            if (reduceMotion) {
+                viewport.scrollLeft = target;
+            } else if (!frame) {
+                frame = requestAnimationFrame(glide);
+            }
+        });
+        viewport.addEventListener('scroll', edges, { passive: true });
+        window.addEventListener('resize', edges);
+        edges();
+    })();
+
+    // Quick start: open a ready-made rule for review before saving
+    $('.ulticocl-preset').on('click', function() {
+        fillRuleForm(ulticoclData.presets[$(this).data('preset')], __('New Smart Rule', td));
+    });
+
+    $(document).on('click', '.ulticocl-edit-rule', function() {
+        const id = $(this).data('id');
+        post({ action: 'ulticocl_get_rule', rule_id: id }).done(function(response) {
+            if (response.success) {
+                fillRuleForm($.extend({ id: id }, response.data), __('Edit Smart Rule', td));
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        });
+    });
+
+    $(document).on('click', '.ulticocl-delete-rule', function() {
+        const id = $(this).data('id');
+        if (!confirm(__('Delete this rule? Comments it already caught stay where they are.', td))) {
+            return;
+        }
+        post({ action: 'ulticocl_delete_rule', rule_id: id }).done(function(response) {
+            if (response.success) {
+                location.reload();
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        });
+    });
+
+    $form.on('submit', function(e) {
+        e.preventDefault();
+        post($.extend({ action: 'ulticocl_save_rule' }, rulePayload())).done(function(response) {
+            if (response.success) {
+                location.reload();
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        }).fail(function() {
+            showAlert(__('An error occurred. Please try again.', td), 'error');
+        });
+    });
+
+    // Close Modal
+    $('.remove-comments-modal-close').on('click', function() {
+        $modal.hide();
+    });
+
+    // Close modal on outside click
+    $(window).on('click', function(e) {
+        if ($(e.target).is('.remove-comments-modal')) {
+            $('.remove-comments-modal').hide();
+        }
+    });
+
+    // Deep links from the dashboard: ?preset=cyrillic or ?keywords=a,b,c open the dialog prefilled
+    if ($modal.length) {
+        const params = new URLSearchParams(window.location.search);
+        const preset = params.get('preset');
+        const keywords = params.get('keywords');
+        if (preset && ulticoclData.presets[preset]) {
+            fillRuleForm(ulticoclData.presets[preset], __('New Smart Rule', td));
+        } else if (keywords) {
+            fillRuleForm({
+                name: __('Spam words', td),
+                keywords: keywords.split(',').map(function(word) { return word.trim(); }).filter(Boolean).slice(0, 50)
+            }, __('New Smart Rule', td));
+        }
+    }
+
+    function doneText(action, n) {
+        const count = n.toLocaleString();
+        if (action === 'delete') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Deleted %s comment.', 'Deleted %s comments.', n, td), count);
+        }
+        if (action === 'spam') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Marked %s comment as spam.', 'Marked %s comments as spam.', n, td), count);
+        }
+        /* translators: %s: number of comments */
+        return sprintf(_n('Moved %s comment to quarantine.', 'Moved %s comments to quarantine.', n, td), count);
+    }
+
+    // Scan existing comments with a rule in batches, showing progress. dry = test only.
+    function scanRule(payload, dry, ruleName, action) {
+        const totals = { scanned: 0, matched: 0, acted: 0, total: 0, samples: [] };
+        $result.show().empty().append($('<p>').text(__('Starting...', td)));
+        $result[0].scrollIntoView({ behavior: 'smooth', block: 'nearest' });
+
+        function progress() {
+            const pct = totals.total ? Math.min(100, Math.round(100 * totals.scanned / totals.total)) : 0;
+            $result.empty().append(
+                $('<p>').text(sprintf(
+                    /* translators: 1: comments checked so far, 2: total comments to check, 3: comments matched so far */
+                    __('Checking... %1$s of %2$s comments, %3$s matched so far', td),
+                    totals.scanned.toLocaleString(), totals.total.toLocaleString(), totals.matched.toLocaleString()
+                )),
+                $('<div>').addClass('ulticocl-progress').append($('<div>').css('width', pct + '%'))
+            );
+        }
+
+        function finish() {
+            $result.empty();
+            if (dry) {
+                $result.append($('<p>').append($('<strong>').text(sprintf(
+                    /* translators: 1: comments matched, 2: comments checked, 3: rule name */
+                    __('Test finished: %1$s of %2$s existing comments match "%3$s". Nothing was changed.', td),
+                    totals.matched.toLocaleString(), totals.scanned.toLocaleString(), ruleName
+                ))));
+                if (totals.scanned >= 10 && totals.matched / totals.scanned >= 0.5) {
+                    $result.append($('<p>').addClass('ulticocl-error').text(
+                        __('This rule matches a very large share of your comments. Check its keywords before running it.', td)
+                    ));
+                }
+                if (totals.samples.length) {
+                    const list = $('<ul>').addClass('ulticocl-samples');
+                    totals.samples.forEach(function(s) {
+                        list.append($('<li>').append(
+                            $('<strong>').text(s.author || '—'),
+                            document.createTextNode(': ' + s.excerpt + ' '),
+                            $('<em>').text('(' + s.reason + ')')
+                        ));
+                    });
+                    $result.append(list);
+                }
+                if (totals.matched > 0) {
+                    $result.append($('<p>').append($('<a>', {
+                        href: ulticoclData.reviewUrl,
+                        'class': 'button button-primary',
+                        text: __('Review these comments', td)
+                    })));
+                }
+            } else {
+                $result.append($('<p>').append($('<strong>').text(doneText(action, totals.acted))));
+                $result.append($('<p>').append($('<a>', { href: window.location.href, text: __('Refresh the list', td) })));
+            }
+        }
+
+        function step(cursor) {
+            post($.extend({
+                action: 'ulticocl_scan_rule',
+                dry: dry ? 1 : 0,
+                cursor: cursor,
+                acted_so_far: totals.acted
+            }, payload)).done(function(response) {
+                if (!response.success) {
+                    $result.empty().append($('<p>').addClass('ulticocl-error').text(errorMessage(response)));
+                    return;
+                }
+                const d = response.data;
+                totals.scanned += d.scanned;
+                totals.matched += d.matched;
+                totals.acted += d.acted;
+                totals.samples = totals.samples.concat(d.samples).slice(0, 5);
+                if (d.total !== undefined) {
+                    totals.total = d.total;
+                }
+                if (d.done) {
+                    finish();
+                } else {
+                    progress();
+                    step(d.cursor);
+                }
+            }).fail(function() {
+                $result.empty().append($('<p>').addClass('ulticocl-error').text(__('An error occurred. Please try again.', td)));
             });
-        }, 30000);
-    }
-    
-    function updateStats(stats) {
-        // Update stat cards
-        $('.remove-comments-stat-card').each(function() {
-            const label = $(this).find('.remove-comments-stat-label').text().trim();
-            let value = 0;
-            
-            if (label.includes('Total')) value = stats.total;
-            else if (label.includes('Approved')) value = stats.approved;
-            else if (label.includes('Pending')) value = stats.pending;
-            else if (label.includes('Spam')) value = stats.spam;
-            else if (label.includes('Trash')) value = stats.trash;
-            else if (label.includes('Triggers')) value = stats.triggers;
-            
-            $(this).find('.remove-comments-stat-value').text(value.toLocaleString());
-        });
-    }
-    
+        }
+
+        step(0);
+    }
+
+    // Test the rule currently in the form, without saving it
+    $('#ulticocl-test-form').on('click', function() {
+        const payload = rulePayload();
+        $modal.hide();
+        scanRule(payload, true, payload.name);
+    });
+
+    // Test or run a saved rule from the list
+    $(document).on('click', '.ulticocl-scan-saved', function() {
+        const button = $(this);
+        const dry = String(button.data('dry')) === '1';
+        const name = button.closest('.ulticocl-rule').find('h3').text();
+        const action = button.data('action');
+        if (!dry) {
+            const messages = {
+                quarantine: __('Run this rule now? Matching comments will be moved to quarantine.', td),
+                spam: __('Run this rule now? Matching comments will be marked as spam.', td),
+                'delete': __('Run this rule now? Matching comments will be permanently deleted.', td)
+            };
+            if (!confirm(messages[action] || messages.quarantine)) {
+                return;
+            }
+        }
+        scanRule({ rule_id: button.data('id') }, dry, name, action);
+    });
+
+    // ---------------------------------------------------------------------
+    // Comment lists: confirm permanent deletes
+    // ---------------------------------------------------------------------
+
+    $(document).on('click', '.remove-comments-comments-panel a.submitdelete', function(e) {
+        if (!confirm(__('Permanently delete this comment? This cannot be undone.', td))) {
+            e.preventDefault();
+        }
+    });
+
+    $('.remove-comments-comments-panel form[method="post"]').on('submit', function(e) {
+        const form = $(this);
+        const selected = form.find('input[name="ids[]"]:checked').length;
+        const action = [form.find('select[name="action"]').val(), form.find('select[name="action2"]').val()].filter(function(v) {
+            return v && v !== '-1';
+        })[0];
+        if (action === 'delete' && selected > 0 && !confirm(sprintf(
+            /* translators: %s: number of comments */
+            _n('Permanently delete %s comment? This cannot be undone.', 'Permanently delete %s comments? This cannot be undone.', selected, td),
+            selected.toLocaleString()
+        ))) {
+            e.preventDefault();
+        }
+    });
+
+    // ---------------------------------------------------------------------
+    // Dashboard, filters and settings
+    // ---------------------------------------------------------------------
+
     // Checkbox group handling
     $('input[name="status[]"]').on('change', function() {
+        if (!$(this).closest('#remove-comments-delete-form').length) {
+            return;
+        }
         if ($(this).val() === 'all' && $(this).is(':checked')) {
             $('input[name="status[]"]').not(this).prop('checked', false);
@@ -337 +628 @@
         }
     });
-    
+
     $('input[name="post_type[]"]').on('change', function() {
         if ($(this).val() === 'all' && $(this).is(':checked')) {
@@ -345 +636 @@
         }
     });
-    
+
     // Toggle email field visibility based on notification checkbox
     $('input[name="send_email_notifications"]').on('change', function() {
@@ -354 +645 @@
         }
     });
-    
+
     // Settings Form - Use AJAX for better UX
     $('#remove-comments-settings-form').on('submit', function(e) {
         e.preventDefault();
-        
+
         const notificationEmail = $('#rc_notification_email').val();
         if ($('input[name="send_email_notifications"]').is(':checked') && (!notificationEmail || !notificationEmail.trim())) {
-            showAlert('Please enter an email address for notifications.', 'error');
+            showAlert(__('Please enter an email address for notifications.', td), 'error');
             return;
         }
-        
-        const formData = {
+
+        const submitButton = $(this).find('button[type="submit"]');
+        const originalText = submitButton.text();
+        submitButton.prop('disabled', true).text(__('Saving...', td));
+
+        post({
             action: 'ulticocl_save_settings',
-            nonce: ulticoclData.nonce,
             enable_logging: $('input[name="enable_logging"]').is(':checked') ? 1 : 0,
             send_email_notifications: $('input[name="send_email_notifications"]').is(':checked') ? 1 : 0,
-            notification_email: notificationEmail
-        };
-        
-        const submitButton = $(this).find('button[type="submit"]');
-        const originalText = submitButton.text();
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: formData,
-            beforeSend: function() {
-                submitButton.prop('disabled', true).text('Saving...');
-            },
-            success: function(response) {
-                if (response.success) {
-                    showAlert(response.data.message || 'Settings have been saved successfully.', 'success');
-                    // Reload to show updated settings and notice
-                    setTimeout(function() {
-                        const url = new URL(window.location.href);
-                        url.searchParams.set('tab', 'settings');
-                        url.searchParams.set('settings-updated', 'true');
-                        window.location.href = url.toString();
-                    }, 1000);
-                } else {
-                    showAlert(response.data.message || 'An error occurred while saving settings.', 'error');
-                }
-            },
-            error: function() {
-                showAlert('An error occurred while saving settings.', 'error');
-            },
-            complete: function() {
+            notification_email: notificationEmail,
+            quarantine_days: $('#ulticocl_quarantine_days').val(),
+            allowlist: $('#ulticocl_allowlist').val()
+        }).done(function(response) {
+            if (response.success) {
+                // Reload to show updated settings and notice
+                const url = new URL(window.location.href);
+                url.searchParams.set('tab', 'settings');
+                url.searchParams.set('settings-updated', 'true');
+                window.location.href = url.toString();
+            } else {
+                showAlert(errorMessage(response), 'error');
                 submitButton.prop('disabled', false).text(originalText);
             }
+        }).fail(function() {
+            showAlert(__('An error occurred while saving settings.', td), 'error');
+            submitButton.prop('disabled', false).text(originalText);
         });
     });

ultimate-comment-cleaner/tags/1.1.0/readme.txt

@@ -1 +1 @@
 === Ultimate Comment Cleaner ===
 Contributors: wpunicorn
-Tags: delete comments, bulk delete comment, remove comment,stop spam, clean comment
-Requires at least: 5.0
-Tested up to: 6.9
-Stable tag: 1.0.0
+Tags: spam, delete comments, comment cleaner, quarantine, bulk delete
+Requires at least: 5.5
+Tested up to: 7.1
+Requires PHP: 7.4
+Stable tag: 1.1.0
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -10 +11 @@
 Author URI: https://profiles.wordpress.org/wpunicorn/
 
-Bulk delete WordPress comments with advanced filters, triggers, and a modern dashboard. Delete by status, date, author, and more.
+Stop comment spam with smart rules: keywords, Cyrillic/Chinese text, links. Quarantine, review and bulk-clean comments. Restore any mistake.
 
 == Description ==
 
-**Ultimate Comment Cleaner** is a comprehensive WordPress comment management plugin that allows you to efficiently delete comments in bulk with advanced filtering options. Whether you need to clean up spam, remove old comments, or manage comments by specific criteria, this plugin provides all the tools you need.
+**Ultimate Comment Cleaner** catches comment spam by *what it says*, keeps what it catches in a quarantine you can restore from, and gives you a proper screen to search, filter and clean up every comment on your site.
 
-= Key Features =
+Getting hit by Russian gambling spam, Chinese link farms or "buy followers" offers? Pick a ready-made rule, test it against your existing comments to see exactly what it would catch, then switch it on.
 
-* **Creative Dashboard** - Beautiful, modern dashboard with real-time statistics and visual cards
-* **Bulk Delete** - Delete comments by status, date range, post type, author, and more
-* **Advanced Filters** - Filter by URL presence, word count, and custom criteria
-* **Auto Triggers** - Set up automatic deletion rules that run on schedule
-* **Export Functionality** - Export comments to CSV before deletion
-* **Preview Count** - See how many comments match your criteria before deleting
-* **Activity Log** - Track all deletion activities
-* **Real-time Stats** - Live statistics that update automatically
-* **WordPress Standards** - Follows WordPress coding standards and best practices
+= Smart Rules =
 
-= Dashboard Features =
+Rules check **new comments as they arrive** and can clean up **existing comments on a schedule**. A rule can look for:
 
-* Visual stat cards showing comment counts by status
-* Total comments, approved, pending, spam, and trash counts
-* Active triggers counter
-* Recent activity log
-* Quick action buttons
+* **Keywords and phrases** - whole word (`casino`), word start (`casino*`), anywhere (`*casino*`) or a regular expression. English, Russian and any other language.
+* **Writing system** - flag comments written mostly in Cyrillic, Chinese, Japanese, Korean, Arabic, Thai, Hebrew, Hindi or Greek.
+* **Links** - comments with N or more links, or a website filled in.
+* **Short comments** - fewer than N words. Combine with "ALL" for rules such as "short comment with a link".
+* **Where to look** - comment text, name, email or website.
+* **Status and age** - for existing comments, such as "pending comments older than 30 days".
 
-= Bulk Delete Options =
+Ready-made rules to start from: Russian/Cyrillic text, Gambling spam (English and Russian), Chinese/Japanese/Korean text, Link stuffing, Short comment with a link, Pharmacy spam, Crypto and get-rich-quick, SEO and promotion spam, Adult content.
 
-* Filter by status (All, Approved, Pending, Spam, Trash)
-* Date range filtering
-* Post type filtering
-* Author filtering
-* Comments with/without URLs
-* Short comments (less than 10 words)
-* Custom word count range (min/max words)
-* Preview count before deletion
-* Export to CSV
+What a rule does when it matches is up to you: **move to quarantine** (recommended), **mark as spam** or **delete permanently**.
 
-= Auto Triggers =
+= Test before you trust it =
 
-* Create automatic deletion rules
-* Schedule: hourly, daily, or weekly
-* Filter by status and age (older than X days)
-* Enable/disable individually
-* View execution history
+Every rule has a **Test on existing comments** button. It shows how many comments would match, a sample of them and why, and changes nothing. One click opens the matches in the comment list, where you can approve, spam, quarantine or delete them individually or in bulk.
+
+= Quarantine =
+
+Caught comments are hidden from your site but not lost. The Quarantine screen shows which rule caught each comment and why, lets you **restore** or delete them, and removes them automatically after the number of days you choose. A comment you restore is never caught by your rules again.
+
+= Dashboard =
+
+See what is happening at a glance. Stat tiles with trends, comments per day by status, how many comments your rules stopped, when spam arrives, and which writing systems, websites and words show up in spam. A rule performance table shows how many comments each rule caught and how often you had to restore them, and plain-language suggestions point out what needs attention. Switch between the last 7, 30 and 90 days. Every chart has a table view, and nothing is loaded from outside your site.
+
+= Manage Comments =
+
+A full comment list inside the plugin: search by text, name, email, website or IP, filter by links, website and date, see spam signals under each comment (links, writing system), and approve, unapprove, mark as spam, quarantine, edit or delete in bulk.
+
+= Bulk Clean =
+
+Delete, mark as spam or quarantine comments in bulk with filters for status, date range, post type, author, search text, links and word count. Preview the count first. Large clean-ups run in batches with a progress counter, so they do not time out. Export matching comments to CSV before you delete.
+
+= Built to be safe =
+
+* Quarantine is the default action, and everything in it can be restored.
+* Rules that could match every comment are refused.
+* Comments by moderators and administrators are never touched. Add trusted email addresses or domains to the allowlist.
+* Only real comments, pingbacks and trackbacks are managed. WooCommerce reviews and order notes are left alone.
+* Confirmations show the exact number of comments before anything permanent happens.
 
 == Installation ==
@@ -64 +70 @@
 == Frequently Asked Questions ==
 
-= How do I delete all spam comments? =
+= How do I stop Russian gambling spam? =
 
-Go to **Tools → Ultimate Comment Cleaner → Bulk Delete**, select "Spam" in the status filter, and click "Delete Comments".
+Go to **Tools → Ultimate Comment Cleaner → Smart Rules** and click **Gambling spam** (keywords in English and Russian). Click **Test on existing comments** to see what it would catch, then **Save Rule**. For comments written in Russian generally, also add **Russian / Cyrillic text**.
 
-= Can I preview how many comments will be deleted? =
+= What happens to a comment a rule catches? =
 
-Yes! Use the "Preview Count" button to see how many comments match your criteria before deleting.
+By default it is moved to quarantine: hidden from your site and from the normal comment screen, but kept so you can restore it. Choose "Mark as spam" or "Delete permanently" per rule if you prefer.
 
-= How do I set up automatic spam cleanup? =
+= Can a rule catch good comments by mistake? =
 
-Go to **Tools → Ultimate Comment Cleaner → Auto Triggers**, click "Add New Trigger", set the status to "Spam", choose a schedule, and enable it.
+It can, which is why rules default to quarantine and have a test button. Restore a good comment from the Quarantine tab and it is never caught by your rules again. You can also add trusted email addresses or domains to the allowlist in Settings.
+
+= Does it check new comments or only old ones? =
+
+Both. Each rule can apply to new comments as they arrive, to existing comments on an hourly, daily or weekly schedule, or to both.
+
+= How long do quarantined comments stay? =
+
+14 days by default. Change it in **Settings**, or set 0 to keep them until you delete them.
+
+= Does it work with Akismet? =
+
+Yes. Comments Akismet already marks as spam are left to Akismet. Your rules add extra checks on top, such as keywords and writing systems.
+
+= Where did my quarantined comments go if I deactivate the plugin? =
+
+Quarantined comments stay hidden while the plugin is deactivated. Reactivate it to see them again. If you delete the plugin, they are handed back to WordPress as spam.
+
+= I used Auto Triggers in version 1.0. What happened to them? =
+
+They are imported as Smart Rules that delete exactly as before. A trigger that had no age limit (and so could have deleted every approved or pending comment) is imported switched off. Review it under Smart Rules.
+
+= Can I preview how many comments will be affected? =
+
+Yes. Bulk Clean has a "Preview Count" button, rules have a "Test on existing comments" button, and every confirmation shows the exact number.
 
 = Can I export comments before deleting them? =
 
-Yes! Use the "Export Selected" or "Export All Comments" buttons to download comments as a CSV file.
+Yes. Use "Export Selected" or "Export All Comments" to download comments as a CSV file.
 
 = What permissions are required? =
 
 You need the `manage_options` capability (typically Administrator role) to use this plugin.
-
-= Why are some comments left behind after deletion? =
-
-This has been fixed in version 1.0.0. The plugin now uses WordPress's `wp_delete_comment()` function which properly cleans up all comment data including meta and post counts.
 
 == Screenshots ==
@@ -96 +122 @@
 
 == Changelog ==
+
+= 1.1.0 =
+* New: Smart Rules - catch spam by keywords, writing system (Cyrillic, Chinese, Japanese, Korean and more), links, website and comment length, on new comments and on existing ones
+* New: nine ready-made rules, including Russian/Cyrillic text and Gambling spam in English and Russian
+* New: test any rule on your existing comments before using it, then review the matches in the comment list
+* New: Quarantine - caught comments are hidden but restorable, and are deleted automatically after the number of days you set
+* New: Manage Comments - search, filter, edit and bulk-manage all comments inside the plugin
+* New: redesigned dashboard with trend charts, spam insights, rule accuracy and suggestions for the last 7, 30 or 90 days
+* New: Bulk Clean can quarantine, mark as spam or delete, and can search by text
+* New: allowlist of trusted email addresses and domains that rules never touch
+* New: confirmations for permanent deletes in the comment lists
+* Change: "Auto Triggers" are now Smart Rules; existing triggers are imported automatically
+* Fix: Creating a new auto trigger no longer overwrites the previous one
+* Fix: "Export Selected" now exports only the comments matching your filters, including word-count filters
+* Fix: Activity logging and email notifications can now be turned off
+* Fix: Scheduled rules no longer drift on sites with a non-UTC timezone
+* Fix: Clicking outside the rule dialog now closes it
+* Safety: Invalid or missing filters now match nothing instead of all comments
+* Safety: Rules that would match every comment are refused
+* Safety: Exported CSV cells are protected against spreadsheet formula injection
+* Improvement: Bulk actions run in batches with a progress counter, so large clean-ups no longer time out
+* Improvement: Confirmation shows the exact number of comments affected
+* Improvement: Faster deletion (deferred comment counting, no site-wide cache flush)
+* Improvement: Large exports are streamed in chunks to save memory
+* Improvement: All interface messages are now translatable
+* Improvement: Scheduled events are removed on deactivation; plugin data is removed on uninstall
+* Requires WordPress 5.5 and PHP 7.4 or newer
 
 = 1.0.0 =
@@ -111 +164 @@
 == Upgrade Notice ==
 
+= 1.1.0 =
+Big update: Smart Rules catch spam by keywords, language and links, with a restorable quarantine and a full comment manager. Fixes new triggers overwriting each other. Existing triggers are imported as rules.
+
 = 1.0.0 =
 Initial release of Ultimate Comment Cleaner. Install to start managing your comments efficiently!

ultimate-comment-cleaner/tags/1.1.0/ultimate-comment-cleaner.php

@@ -3 +3 @@
  * Plugin Name: Ultimate Comment Cleaner
  * Plugin URI: https://wordpress.org/plugins/ultimate-comment-cleaner/
- * Description: A powerful WordPress plugin to bulk delete comments with advanced filters, triggers, and a beautiful creative dashboard. Delete comments by status, date range, author, post type, and more.
- * Version: 1.0.0
+ * Description: Stop comment spam with smart rules (keywords, writing system, links), a restorable quarantine, a full comment manager and bulk clean-up tools.
+ * Version: 1.1.0
  * Author: wpunicorn
  * Author URI: https://profiles.wordpress.org/wpunicorn/
@@ -10 +10 @@
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
  * Text Domain: ultimate-comment-cleaner
- * Requires at least: 5.0
- * Tested up to: 6.9
+ * Requires at least: 5.5
+ * Requires PHP: 7.4
+ * Tested up to: 7.1
  */
 
@@ -25 +26 @@
  */
 if (!defined('ULTICOCL_PLUGIN_VERSION')) {
-    define('ULTICOCL_PLUGIN_VERSION', '1.0.0');
+    define('ULTICOCL_PLUGIN_VERSION', '1.1.0');
 }
 if (!defined('ULTICOCL_PLUGIN_DIR')) {
@@ -37 +38 @@
 }
 
+require_once ULTICOCL_PLUGIN_DIR . 'includes/class-ulticocl-matcher.php';
+require_once ULTICOCL_PLUGIN_DIR . 'includes/class-ulticocl-insights.php';
+
 class ULTICOCL_Plugin {
-    
+
+    /**
+     * Comments handled per request / per cron batch. Keeps each request well under host time limits.
+     */
+    const BATCH_SIZE = 500;
+
+    /**
+     * Seconds one cron run may spend scanning rules before it carries on next time.
+     */
+    const CRON_BUDGET = 20;
+
+    /**
+     * comment_approved value for quarantined comments. Core ignores unknown statuses,
+     * so quarantined comments stay out of the site, the comment screen and trash handling.
+     */
+    const QUARANTINE = 'ulticocl_quarantine';
+
+    /**
+     * Allowed status filter values mapped to comment_approved column values.
+     */
+    const STATUS_MAP = array(
+        'approved'   => '1',
+        'pending'    => '0',
+        'spam'       => 'spam',
+        'trash'      => 'trash',
+        'quarantine' => self::QUARANTINE,
+    );
+
+    /**
+     * Comment types this plugin manages. Other types (WooCommerce notes, reviews...) are never touched.
+     */
+    const TYPES = array('comment', 'pingback', 'trackback');
+
+    const SCHEDULES = array('hourly', 'daily', 'weekly');
+
+    const COMMENT_ACTIONS = array('approve', 'unapprove', 'spam', 'quarantine', 'restore', 'delete');
+
     private static $instance = null;
-    
+
+    /** @var array|null Rule that flagged the comment currently being inserted: array(id, rule, reason). */
+    private $pending = null;
+
+    /** @var int[] New comments to delete once WordPress has finished inserting them. */
+    private $deferred_deletes = array();
+
     public static function get_instance() {
         if (null === self::$instance) {
@@ -47 +93 @@
         return self::$instance;
     }
-    
+
     private function __construct() {
         $this->init_hooks();
     }
-    
+
     private function init_hooks() {
         add_action('admin_menu', array($this, 'add_admin_menu'));
         add_action('admin_enqueue_scripts', array($this, 'enqueue_scripts'));
-        add_action('wp_ajax_ulticocl_delete_comments', array($this, 'ajax_delete_comments'));
-        add_action('wp_ajax_ulticocl_get_stats', array($this, 'ajax_get_stats'));
+        add_action('wp_ajax_ulticocl_bulk_process', array($this, 'ajax_bulk_process'));
+        add_action('wp_ajax_ulticocl_dashboard', array($this, 'ajax_dashboard'));
         add_action('wp_ajax_ulticocl_export_comments', array($this, 'ajax_export_comments'));
-        add_action('wp_ajax_ulticocl_save_trigger', array($this, 'ajax_save_trigger'));
-        add_action('wp_ajax_ulticocl_delete_trigger', array($this, 'ajax_delete_trigger'));
-        add_action('wp_ajax_ulticocl_get_trigger', array($this, 'ajax_get_trigger'));
+        add_action('wp_ajax_ulticocl_save_rule', array($this, 'ajax_save_rule'));
+        add_action('wp_ajax_ulticocl_delete_rule', array($this, 'ajax_delete_rule'));
+        add_action('wp_ajax_ulticocl_get_rule', array($this, 'ajax_get_rule'));
+        add_action('wp_ajax_ulticocl_scan_rule', array($this, 'ajax_scan_rule'));
         add_action('wp_ajax_ulticocl_preview_count', array($this, 'ajax_preview_count'));
         add_action('wp_ajax_ulticocl_save_settings', array($this, 'ajax_save_settings'));
-        
-        // Handle settings form submission (non-AJAX fallback)
+
+        // Settings form (non-AJAX fallback) and row/bulk actions on the comment lists
         add_action('admin_init', array($this, 'handle_settings_save'));
-        
-        // Scheduled triggers
-        add_action('ulticocl_check_triggers', array($this, 'check_triggers'));
-        if (!wp_next_scheduled('ulticocl_check_triggers')) {
-            wp_schedule_event(time(), 'hourly', 'ulticocl_check_triggers');
-        }
-        
+        add_action('admin_init', array($this, 'handle_comment_actions'));
+
+        // Screen new comments as they arrive
+        add_filter('pre_comment_approved', array($this, 'screen_new_comment'), 20, 2);
+        add_action('comment_post', array($this, 'after_new_comment'), 5);
+
+        add_action('init', array($this, 'maybe_upgrade'), 1);
+
+        // Scheduled rule runs and quarantine clean-up
+        add_action('ulticocl_run_rules', array($this, 'run_scheduled_rules'));
+        add_action('ulticocl_purge_quarantine', array($this, 'purge_quarantine'));
+        if (!wp_next_scheduled('ulticocl_run_rules')) {
+            wp_schedule_event(time(), 'hourly', 'ulticocl_run_rules');
+        }
+        if (!wp_next_scheduled('ulticocl_purge_quarantine')) {
+            wp_schedule_event(time(), 'daily', 'ulticocl_purge_quarantine');
+        }
+
         // Add settings link to plugins page
         add_filter('plugin_action_links_' . ULTICOCL_PLUGIN_BASENAME, array($this, 'add_plugin_action_links'));
@@ -103 +161 @@
         
         // Enqueue scripts
-        wp_enqueue_script('jquery');
         wp_enqueue_script(
             'ulticocl-admin-script',
             ULTICOCL_PLUGIN_URL . 'assets/js/admin.js',
-            array('jquery'),
+            array('jquery', 'wp-i18n'),
             ULTICOCL_PLUGIN_VERSION,
             true
         );
-        
-        // Note: SweetAlert2 removed - external CDN resources not allowed
-        // Using WordPress native confirmations via JavaScript confirm() instead
-        
-        // Localize script
+        wp_set_script_translations('ulticocl-admin-script', 'ultimate-comment-cleaner');
+
+        $presets = array();
+        foreach (ULTICOCL_Matcher::presets() as $key => $preset) {
+            $presets[$key] = $preset['rule'];
+        }
         wp_localize_script('ulticocl-admin-script', 'ulticoclData', array(
             'ajaxurl' => admin_url('admin-ajax.php'),
             'nonce' => wp_create_nonce('ulticocl_nonce'),
-            'strings' => array(
-                'confirm_delete' => __('Are you sure you want to delete these comments? This action cannot be undone.', 'ultimate-comment-cleaner'),
-                'deleting' => __('Deleting comments...', 'ultimate-comment-cleaner'),
-                'success' => __('Comments deleted successfully!', 'ultimate-comment-cleaner'),
-                'error' => __('An error occurred. Please try again.', 'ultimate-comment-cleaner'),
-            )
+            'presets' => $presets,
+            'ruleDefaults' => ULTICOCL_Matcher::defaults(),
+            'reviewUrl' => add_query_arg(array('page' => 'ultimate-comment-cleaner', 'tab' => 'manage', 'review' => 1), admin_url('tools.php')),
         ));
+
+        // The charts only exist on the dashboard, so only load them there.
+        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab parameter is for navigation only.
+        $tab = isset($_GET['tab']) ? sanitize_key(wp_unslash($_GET['tab'])) : 'dashboard';
+        if ('dashboard' === $tab) {
+            wp_enqueue_style('ulticocl-dashboard-style', ULTICOCL_PLUGIN_URL . 'assets/css/dashboard.css', array('ulticocl-admin-style'), ULTICOCL_PLUGIN_VERSION);
+            wp_enqueue_script('ulticocl-dashboard-script', ULTICOCL_PLUGIN_URL . 'assets/js/dashboard.js', array('ulticocl-admin-script', 'wp-i18n'), ULTICOCL_PLUGIN_VERSION, true);
+            wp_set_script_translations('ulticocl-dashboard-script', 'ultimate-comment-cleaner');
+            // First paint uses this data; the script refreshes it over AJAX. Hex-escaped so it is safe inside a script tag.
+            wp_add_inline_script(
+                'ulticocl-dashboard-script',
+                'window.ulticoclDash = ' . wp_json_encode(ULTICOCL_Insights::collect($this->dashboard_days(), $this->get_comment_stats()), JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT) . ';',
+                'before'
+            );
+        }
     }
     
@@ -134 +204 @@
         
         // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab parameter is for navigation only, not form submission
-        $current_tab = isset($_GET['tab']) ? sanitize_text_field(wp_unslash($_GET['tab'])) : 'dashboard';
-        
+        $current_tab = isset($_GET['tab']) ? sanitize_key(wp_unslash($_GET['tab'])) : 'dashboard';
+        if ('triggers' === $current_tab) {
+            $current_tab = 'rules'; // Old bookmarks from version 1.0.
+        }
+        if (!in_array($current_tab, array('dashboard', 'manage', 'quarantine', 'rules', 'delete', 'settings'), true)) {
+            $current_tab = 'dashboard';
+        }
+        $quarantined = (int) get_comments(array('count' => true, 'status' => self::QUARANTINE));
+        $tabs = array(
+            'dashboard'  => array('dashicons-dashboard', __('Dashboard', 'ultimate-comment-cleaner')),
+            'manage'     => array('dashicons-admin-comments', __('Manage Comments', 'ultimate-comment-cleaner')),
+            'quarantine' => array('dashicons-shield', __('Quarantine', 'ultimate-comment-cleaner')),
+            'rules'      => array('dashicons-filter', __('Smart Rules', 'ultimate-comment-cleaner')),
+            'delete'     => array('dashicons-trash', __('Bulk Clean', 'ultimate-comment-cleaner')),
+            'settings'   => array('dashicons-admin-settings', __('Settings', 'ultimate-comment-cleaner')),
+        );
+
         ?>
         <div class="wrap remove-comments-wrap">
@@ -142 +227 @@
                     <?php echo esc_html__('Ultimate Comment Cleaner', 'ultimate-comment-cleaner'); ?>
                 </h1>
-                <p class="remove-comments-subtitle"><?php echo esc_html__('Advanced comment management with powerful bulk deletion tools', 'ultimate-comment-cleaner'); ?></p>
+                <p class="remove-comments-subtitle"><?php echo esc_html__('Smart rules, quarantine and bulk tools to keep your comments clean', 'ultimate-comment-cleaner'); ?></p>
             </div>
-            
+
             <nav class="remove-comments-tabs">
-                <a href="?page=ultimate-comment-cleaner&tab=dashboard" class="remove-comments-tab <?php echo $current_tab === 'dashboard' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-dashboard"></span>
-                    <?php echo esc_html__('Dashboard', 'ultimate-comment-cleaner'); ?>
-                </a>
-                <a href="?page=ultimate-comment-cleaner&tab=delete" class="remove-comments-tab <?php echo $current_tab === 'delete' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-trash"></span>
-                    <?php echo esc_html__('Bulk Delete', 'ultimate-comment-cleaner'); ?>
-                </a>
-                <a href="?page=ultimate-comment-cleaner&tab=triggers" class="remove-comments-tab <?php echo $current_tab === 'triggers' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-clock"></span>
-                    <?php echo esc_html__('Auto Triggers', 'ultimate-comment-cleaner'); ?>
-                </a>
-                <a href="?page=ultimate-comment-cleaner&tab=settings" class="remove-comments-tab <?php echo $current_tab === 'settings' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-admin-settings"></span>
-                    <?php echo esc_html__('Settings', 'ultimate-comment-cleaner'); ?>
-                </a>
+                <?php foreach ($tabs as $slug => $tab) : ?>
+                    <a href="<?php echo esc_url(add_query_arg(array('page' => 'ultimate-comment-cleaner', 'tab' => $slug), admin_url('tools.php'))); ?>" class="remove-comments-tab <?php echo $current_tab === $slug ? 'active' : ''; ?>">
+                        <span class="dashicons <?php echo esc_attr($tab[0]); ?>"></span>
+                        <?php echo esc_html($tab[1]); ?>
+                        <?php if ('quarantine' === $slug && $quarantined > 0) : ?>
+                            <span class="ulticocl-count"><?php echo esc_html(number_format_i18n($quarantined)); ?></span>
+                        <?php endif; ?>
+                    </a>
+                <?php endforeach; ?>
             </nav>
-            
+
             <div class="remove-comments-content">
                 <?php
+                $this->render_notice();
                 switch ($current_tab) {
                     case 'dashboard':
                         $this->render_dashboard_tab();
                         break;
+                    case 'manage':
+                    case 'quarantine':
+                        $this->render_comments_tab($current_tab);
+                        break;
+                    case 'rules':
+                        $this->render_rules_tab();
+                        break;
                     case 'delete':
                         $this->render_delete_tab();
-                        break;
-                    case 'triggers':
-                        $this->render_triggers_tab();
                         break;
                     case 'settings':
@@ -187 +270 @@
     
     private function render_dashboard_tab() {
-        $stats = $this->get_comment_stats();
         ?>
-        <div class="remove-comments-dashboard">
-            <div class="remove-comments-stats-grid">
-                <div class="remove-comments-stat-card remove-comments-stat-primary">
-                    <span class="dashicons dashicons-admin-comments"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Total Comments', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['total']); ?></div>
-                    </div>
+        <div id="ulticocl-dash" class="ulticocl-dash">
+            <div class="ulticocl-filterbar">
+                <div class="ulticocl-seg" id="ulticocl-range" role="group" aria-label="<?php esc_attr_e('Date range', 'ultimate-comment-cleaner'); ?>">
+                    <?php foreach (ULTICOCL_Insights::RANGES as $range) : ?>
+                        <button type="button" data-days="<?php echo (int) $range; ?>" aria-pressed="false">
+                            <?php
+                            /* translators: %d: number of days */
+                            echo esc_html(sprintf(__('Last %d days', 'ultimate-comment-cleaner'), $range));
+                            ?>
+                        </button>
+                    <?php endforeach; ?>
                 </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-success">
-                    <span class="dashicons dashicons-yes-alt"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Approved', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['approved']); ?></div>
-                    </div>
-                </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-warning">
-                    <span class="dashicons dashicons-clock"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Pending', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['pending']); ?></div>
-                    </div>
-                </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-danger">
-                    <span class="dashicons dashicons-warning"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Spam', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['spam']); ?></div>
-                    </div>
-                </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-gray">
-                    <span class="dashicons dashicons-trash"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Trash', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['trash']); ?></div>
-                    </div>
-                </div>
-                
-                <a href="?page=ultimate-comment-cleaner&tab=triggers" class="remove-comments-stat-card remove-comments-stat-info remove-comments-stat-clickable">
-                    <span class="dashicons dashicons-admin-settings"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Triggers', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['triggers']); ?></div>
-                    </div>
-                    <span class="dashicons dashicons-arrow-right-alt remove-comments-stat-arrow"></span>
-                </a>
+                <span class="ulticocl-updated" id="ulticocl-updated" aria-live="polite"></span>
+                <button type="button" class="ulticocl-linkbtn" id="ulticocl-refresh">
+                    <span class="dashicons dashicons-update" aria-hidden="true"></span>
+                    <?php esc_html_e('Refresh', 'ultimate-comment-cleaner'); ?>
+                </button>
+                <span class="ulticocl-filterbar-actions">
+                    <a class="button" href="?page=ultimate-comment-cleaner&tab=manage"><?php esc_html_e('Manage comments', 'ultimate-comment-cleaner'); ?></a>
+                    <a class="button" href="?page=ultimate-comment-cleaner&tab=rules"><?php esc_html_e('Smart Rules', 'ultimate-comment-cleaner'); ?></a>
+                    <button type="button" class="button" id="remove-comments-export-all"><?php esc_html_e('Export all', 'ultimate-comment-cleaner'); ?></button>
+                </span>
             </div>
-            
-            <div class="remove-comments-quick-actions">
-                <h2><?php esc_html_e('Quick Actions', 'ultimate-comment-cleaner'); ?></h2>
-                <div class="remove-comments-action-buttons">
-                    <a href="?page=ultimate-comment-cleaner&tab=delete" class="remove-comments-action-btn remove-comments-btn-danger">
-                        <span class="dashicons dashicons-trash"></span>
-                        <?php esc_html_e('Delete Comments', 'ultimate-comment-cleaner'); ?>
-                    </a>
-                    <a href="?page=ultimate-comment-cleaner&tab=triggers" class="remove-comments-action-btn remove-comments-btn-primary">
-                        <span class="dashicons dashicons-admin-settings"></span>
-                        <?php esc_html_e('Manage Triggers', 'ultimate-comment-cleaner'); ?>
-                    </a>
-                    <button type="button" class="remove-comments-action-btn remove-comments-btn-success" id="remove-comments-export-all">
-                        <span class="dashicons dashicons-download"></span>
-                        <?php esc_html_e('Export All Comments', 'ultimate-comment-cleaner'); ?>
-                    </button>
-                </div>
+
+            <section class="ulticocl-hero" id="ulticocl-hero" aria-labelledby="ulticocl-hero-title"></section>
+            <div class="ulticocl-tiles" id="ulticocl-tiles"></div>
+
+            <h2 class="ulticocl-h"><?php esc_html_e('Trends', 'ultimate-comment-cleaner'); ?></h2>
+            <div class="ulticocl-grid">
+                <?php
+                $this->dash_card('comments', 8, __('Comments over time', 'ultimate-comment-cleaner'), __('New comments per day, by status', 'ultimate-comment-cleaner'), true);
+                $this->dash_card('insights', 4, __('Insights', 'ultimate-comment-cleaner'), __('What needs your attention', 'ultimate-comment-cleaner'));
+                $this->dash_card('status', 4, __('Where comments stand', 'ultimate-comment-cleaner'), __('All comments right now', 'ultimate-comment-cleaner'));
+                $this->dash_card('caught', 8, __('Caught by Smart Rules', 'ultimate-comment-cleaner'), __('Comments stopped per day', 'ultimate-comment-cleaner'), true);
+                ?>
             </div>
-            
-            <div class="remove-comments-recent-activity">
-                <h2><?php esc_html_e('Recent Activity', 'ultimate-comment-cleaner'); ?></h2>
-                <div class="remove-comments-activity-list">
-                    <?php $this->render_recent_activity(); ?>
-                </div>
+
+            <h2 class="ulticocl-h"><?php esc_html_e('Spam intelligence', 'ultimate-comment-cleaner'); ?></h2>
+            <div class="ulticocl-grid">
+                <?php
+                $this->dash_card('hours', 8, __('When spam arrives', 'ultimate-comment-cleaner'), __('Comments by hour of day. Spam in red, everything else in gray.', 'ultimate-comment-cleaner'), true);
+                $this->dash_card('scripts', 4, __('What spam is written in', 'ultimate-comment-cleaner'), __('Writing system of recent spam', 'ultimate-comment-cleaner'));
+                $this->dash_card('sources', 4, __('Where spam comes from', 'ultimate-comment-cleaner'), __('Most common email domains and websites', 'ultimate-comment-cleaner'));
+                $this->dash_card('posts', 4, __('Most targeted posts', 'ultimate-comment-cleaner'), __('Spam received per post', 'ultimate-comment-cleaner'));
+                $this->dash_card('words', 4, __('Words that stand out', 'ultimate-comment-cleaner'), __('Common in spam and not covered by a rule', 'ultimate-comment-cleaner'));
+                ?>
+            </div>
+
+            <h2 class="ulticocl-h"><?php esc_html_e('Automation and activity', 'ultimate-comment-cleaner'); ?></h2>
+            <div class="ulticocl-grid">
+                <?php
+                $this->dash_card('rules', 8, __('Rule performance', 'ultimate-comment-cleaner'), __('Comments caught in this period, and how often you restored them', 'ultimate-comment-cleaner'));
+                $this->dash_card('automation', 4, __('Automation', 'ultimate-comment-cleaner'), __('What is running on its own', 'ultimate-comment-cleaner'));
+                $this->dash_card('latest', 6, __('Latest caught', 'ultimate-comment-cleaner'), __('Newest comments in quarantine', 'ultimate-comment-cleaner'));
+                $this->dash_card('activity', 6, __('Recent activity', 'ultimate-comment-cleaner'), __('Clean-ups, rule runs and settings changes', 'ultimate-comment-cleaner'));
+                ?>
             </div>
         </div>
         <?php
     }
-    
+
+    /**
+     * A small on/off switch in the brand colour. It is a real checkbox, so it submits and
+     * is read exactly like one; only the look differs.
+     */
+    private function mini_toggle($name, $value, $label, $id = '', $checked = false, $title = '') {
+        ?>
+        <label class="ulticocl-toggle"<?php echo '' !== $title ? ' title="' . esc_attr($title) . '"' : ''; ?>>
+            <span class="remove-comments-toggle-switch ulticocl-mini">
+                <input type="checkbox" name="<?php echo esc_attr($name); ?>" value="<?php echo esc_attr($value); ?>"<?php echo '' !== $id ? ' id="' . esc_attr($id) . '"' : ''; ?> <?php checked($checked); ?>>
+                <span class="remove-comments-toggle-slider"></span>
+            </span>
+            <span class="ulticocl-toggle-label"><?php echo esc_html($label); ?></span>
+        </label>
+        <?php
+    }
+
+    /**
+     * One dashboard card. The dashboard script fills its body from the insights data.
+     */
+    private function dash_card($slot, $span, $title, $subtitle = '', $table_toggle = false) {
+        ?>
+        <section class="ulticocl-card ulticocl-span-<?php echo (int) $span; ?>" data-card="<?php echo esc_attr($slot); ?>">
+            <header class="ulticocl-card-head">
+                <div>
+                    <h3><?php echo esc_html($title); ?></h3>
+                    <?php if ('' !== $subtitle) : ?>
+                        <p class="ulticocl-sub"><?php echo esc_html($subtitle); ?></p>
+                    <?php endif; ?>
+                </div>
+                <?php if ($table_toggle) : ?>
+                    <div class="ulticocl-seg ulticocl-seg-small" role="group" aria-label="<?php esc_attr_e('View', 'ultimate-comment-cleaner'); ?>" data-toggle="<?php echo esc_attr($slot); ?>">
+                        <button type="button" data-view="chart" aria-pressed="true"><?php esc_html_e('Chart', 'ultimate-comment-cleaner'); ?></button>
+                        <button type="button" data-view="table" aria-pressed="false"><?php esc_html_e('Table', 'ultimate-comment-cleaner'); ?></button>
+                    </div>
+                <?php endif; ?>
+            </header>
+            <div class="ulticocl-card-body" data-slot="<?php echo esc_attr($slot); ?>"></div>
+        </section>
+        <?php
+    }
+
+    /**
+     * Date range the dashboard opens with: the last one this user picked.
+     */
+    private function dashboard_days() {
+        $days = (int) get_user_meta(get_current_user_id(), 'ulticocl_dash_days', true);
+        return in_array($days, ULTICOCL_Insights::RANGES, true) ? $days : 30;
+    }
+
     private function render_delete_tab() {
         $post_types = get_post_types(array('public' => true), 'objects');
@@ -275 +387 @@
         <div class="remove-comments-delete-panel">
             <div class="remove-comments-panel-header">
-                <h2><?php esc_html_e('Bulk Delete Comments', 'ultimate-comment-cleaner'); ?></h2>
-                <p><?php esc_html_e('Select filters to find and delete comments matching your criteria', 'ultimate-comment-cleaner'); ?></p>
+                <h2><?php esc_html_e('Bulk Clean Comments', 'ultimate-comment-cleaner'); ?></h2>
+                <p><?php esc_html_e('Select filters, then quarantine, mark as spam or delete everything that matches. Quarantined comments can be restored.', 'ultimate-comment-cleaner'); ?></p>
             </div>
             
@@ -318 +430 @@
                             <span class="remove-comments-toggle-label"><?php esc_html_e('Trash', 'ultimate-comment-cleaner'); ?></span>
                         </label>
+                        <label>
+                            <div class="remove-comments-toggle-switch">
+                                <input type="checkbox" name="status[]" value="quarantine">
+                                <span class="remove-comments-toggle-slider"></span>
+                            </div>
+                            <span class="remove-comments-toggle-label"><?php esc_html_e('Quarantine', 'ultimate-comment-cleaner'); ?></span>
+                        </label>
                     </div>
                 </div>
-                
+
+                <div class="remove-comments-form-section">
+                    <h3><?php esc_html_e('Search Text', 'ultimate-comment-cleaner'); ?></h3>
+                    <input type="search" name="search" id="remove-comments-search" class="remove-comments-form-input" placeholder="<?php esc_attr_e('Word or phrase in the comment, name, email or website', 'ultimate-comment-cleaner'); ?>">
+                </div>
+
                 <div class="remove-comments-form-section">
                     <h3><?php esc_html_e('Filter by Date Range', 'ultimate-comment-cleaner'); ?></h3>
@@ -377 +501 @@
                 <div class="remove-comments-form-section">
                     <h3><?php esc_html_e('Additional Filters', 'ultimate-comment-cleaner'); ?></h3>
-                    <div class="remove-comments-advanced-filters">
-                        <label>
-                            <div class="remove-comments-toggle-switch">
-                                <input type="checkbox" name="has_url">
-                                <span class="remove-comments-toggle-slider"></span>
-                            </div>
-                            <span class="remove-comments-toggle-label"><?php esc_html_e('Comments with URL only', 'ultimate-comment-cleaner'); ?></span>
-                        </label>
-                        <label>
-                            <div class="remove-comments-toggle-switch">
-                                <input type="checkbox" name="no_url">
-                                <span class="remove-comments-toggle-slider"></span>
-                            </div>
-                            <span class="remove-comments-toggle-label"><?php esc_html_e('Comments without URL', 'ultimate-comment-cleaner'); ?></span>
-                        </label>
-                        <label>
-                            <div class="remove-comments-toggle-switch">
-                                <input type="checkbox" name="short_comments">
-                                <span class="remove-comments-toggle-slider"></span>
-                            </div>
-                            <span class="remove-comments-toggle-label"><?php esc_html_e('Short comments (less than 10 words)', 'ultimate-comment-cleaner'); ?></span>
-                        </label>
-                        <label>
-                            <input type="number" name="min_words" placeholder="<?php esc_html_e('Minimum words', 'ultimate-comment-cleaner'); ?>" min="0">
-                        </label>
-                        <label>
-                            <input type="number" name="max_words" placeholder="<?php esc_html_e('Maximum words', 'ultimate-comment-cleaner'); ?>" min="0">
-                        </label>
+                    <div class="ulticocl-toggle-grid" data-cols="3">
+                        <?php
+                        $this->mini_toggle('has_url', '1', __('Comments with URL only', 'ultimate-comment-cleaner'));
+                        $this->mini_toggle('no_url', '1', __('Comments without URL', 'ultimate-comment-cleaner'));
+                        $this->mini_toggle('short_comments', '1', __('Short comments (under 10 words)', 'ultimate-comment-cleaner'));
+                        ?>
+                    </div>
+                    <div class="ulticocl-grid-2 ulticocl-row-after-toggles">
+                        <div class="remove-comments-form-group">
+                            <label for="ulticocl-min-words"><?php esc_html_e('Minimum words', 'ultimate-comment-cleaner'); ?></label>
+                            <input type="number" name="min_words" id="ulticocl-min-words" min="0" placeholder="0">
+                        </div>
+                        <div class="remove-comments-form-group">
+                            <label for="ulticocl-max-words"><?php esc_html_e('Maximum words', 'ultimate-comment-cleaner'); ?></label>
+                            <input type="number" name="max_words" id="ulticocl-max-words" min="0" placeholder="0">
+                        </div>
                     </div>
                 </div>
-                
-                <div class="remove-comments-form-actions">
-                    <button type="button" id="remove-comments-preview-count" class="remove-comments-btn remove-comments-btn-secondary">
-                        <?php esc_html_e('Preview Count', 'ultimate-comment-cleaner'); ?>
+
+                <div class="remove-comments-form-section">
+                    <h3><?php esc_html_e('What to do with matching comments', 'ultimate-comment-cleaner'); ?></h3>
+                    <select name="clean_action" id="remove-comments-clean-action" class="remove-comments-select">
+                        <option value="quarantine"><?php esc_html_e('Move to quarantine (can be restored)', 'ultimate-comment-cleaner'); ?></option>
+                        <option value="spam"><?php esc_html_e('Mark as spam', 'ultimate-comment-cleaner'); ?></option>
+                        <option value="delete"><?php esc_html_e('Delete permanently', 'ultimate-comment-cleaner'); ?></option>
+                    </select>
+                    <p class="description" id="ulticocl-action-help"></p>
+                </div>
+
+                <div class="remove-comments-form-actions ulticocl-form-footer">
+                    <button type="button" id="remove-comments-preview-count" class="ulticocl-rbtn">
+                        <span class="dashicons dashicons-visibility" aria-hidden="true"></span><span class="ulticocl-btn-label"><?php esc_html_e('Preview Count', 'ultimate-comment-cleaner'); ?></span>
                     </button>
-                    <button type="submit" id="remove-comments-delete-btn" class="remove-comments-btn remove-comments-btn-danger">
-                        <span class="dashicons dashicons-trash"></span>
-                        <?php esc_html_e('Delete Comments', 'ultimate-comment-cleaner'); ?>
+                    <button type="button" id="remove-comments-export-btn" class="ulticocl-rbtn">
+                        <span class="dashicons dashicons-download" aria-hidden="true"></span><span class="ulticocl-btn-label"><?php esc_html_e('Export Selected', 'ultimate-comment-cleaner'); ?></span>
                     </button>
-                    <button type="button" id="remove-comments-export-btn" class="remove-comments-btn remove-comments-btn-success">
-                        <span class="dashicons dashicons-download"></span>
-                        <?php esc_html_e('Export Selected', 'ultimate-comment-cleaner'); ?>
+                    <button type="submit" id="remove-comments-delete-btn" class="ulticocl-add-btn ulticocl-apply" data-action="quarantine">
+                        <span class="dashicons dashicons-yes" aria-hidden="true"></span><span class="ulticocl-btn-label"><?php esc_html_e('Apply to Matching Comments', 'ultimate-comment-cleaner'); ?></span>
                     </button>
                 </div>
-                
+
                 <div id="remove-comments-preview-result" class="remove-comments-preview-result" style="display:none;"></div>
             </form>
@@ -428 +548 @@
     }
     
-    private function render_triggers_tab() {
-        $triggers = get_option('ulticocl_triggers', array());
+    private function render_rules_tab() {
+        $rules = $this->get_rules();
+        $state = get_option('ulticocl_rule_state', array());
+        $scripts = ULTICOCL_Matcher::scripts();
+        $actions = $this->action_labels();
+        $scopes = array(
+            'new'      => __('New comments', 'ultimate-comment-cleaner'),
+            'existing' => __('Existing comments', 'ultimate-comment-cleaner'),
+            'both'     => __('New and existing comments', 'ultimate-comment-cleaner'),
+        );
         ?>
         <div class="remove-comments-triggers-panel">
             <div class="remove-comments-panel-header">
-                <h2><?php esc_html_e('Auto Delete Triggers', 'ultimate-comment-cleaner'); ?></h2>
-                <p><?php esc_html_e('Set up automatic triggers to find and delete comments based on conditions', 'ultimate-comment-cleaner'); ?></p>
+                <h2><?php esc_html_e('Smart Rules', 'ultimate-comment-cleaner'); ?></h2>
+                <p><?php esc_html_e('Catch spam by what it says. Rules check new comments as they arrive and can clean up existing ones on a schedule. Quarantined comments can always be restored.', 'ultimate-comment-cleaner'); ?></p>
             </div>
-            
-            <button type="button" id="remove-comments-add-trigger" class="remove-comments-btn remove-comments-btn-primary">
-                <span class="dashicons dashicons-plus"></span>
-                <?php esc_html_e('Add New Trigger', 'ultimate-comment-cleaner'); ?>
-            </button>
-            
-            <div id="remove-comments-triggers-list" class="remove-comments-triggers-list">
-                <?php if (empty($triggers)): ?>
+
+            <div class="ulticocl-rules-toolbar">
+                <div class="ulticocl-presets">
+                    <strong class="ulticocl-presets-title"><?php esc_html_e('Quick start', 'ultimate-comment-cleaner'); ?></strong>
+                    <div class="ulticocl-presets-viewport" id="ulticocl-presets">
+                        <div class="ulticocl-presets-track">
+                            <?php foreach (ULTICOCL_Matcher::presets() as $key => $preset) : ?>
+                                <button type="button" class="ulticocl-preset" data-preset="<?php echo esc_attr($key); ?>" title="<?php echo esc_attr($preset['description']); ?>">
+                                    <span class="dashicons dashicons-<?php echo esc_attr($preset['icon']); ?>" aria-hidden="true"></span>
+                                    <span><?php echo esc_html($preset['label']); ?></span>
+                                </button>
+                            <?php endforeach; ?>
+                        </div>
+                    </div>
+                </div>
+                <button type="button" id="ulticocl-add-rule" class="ulticocl-add-btn">
+                    <span class="dashicons dashicons-plus" aria-hidden="true"></span>
+                    <?php esc_html_e('Add New Rule', 'ultimate-comment-cleaner'); ?>
+                </button>
+            </div>
+
+            <div id="ulticocl-scan-result" class="ulticocl-scan-result" style="display:none;" role="status" aria-live="polite"></div>
+
+            <div id="ulticocl-rules-list" class="remove-comments-triggers-list">
+                <?php if (empty($rules)) : ?>
                     <div class="remove-comments-empty-state">
-                        <p><?php esc_html_e('No triggers configured. Click "Add New Trigger" to create one.', 'ultimate-comment-cleaner'); ?></p>
+                        <p><?php esc_html_e('No rules yet. Pick a Quick start above or click "Add New Rule".', 'ultimate-comment-cleaner'); ?></p>
                     </div>
-                <?php else: ?>
-                    <?php foreach ($triggers as $id => $trigger): ?>
-                        <div class="remove-comments-trigger-item" data-trigger-id="<?php echo esc_attr($id); ?>">
-                            <div class="remove-comments-trigger-header">
-                                <h3><?php echo esc_html($trigger['name']); ?></h3>
-                                <div class="remove-comments-trigger-status">
-                                    <span class="remove-comments-status-badge <?php echo $trigger['active'] ? 'active' : 'inactive'; ?>">
-                                        <?php echo $trigger['active'] ? esc_html__('Active', 'ultimate-comment-cleaner') : esc_html__('Inactive', 'ultimate-comment-cleaner'); ?>
+                <?php else : ?>
+                    <?php foreach ($rules as $id => $rule) : ?>
+                        <?php
+                        $st = isset($state[$id]) ? $state[$id] : array();
+                        $last = !empty($st['last_run']) ? wp_date(get_option('date_format') . ' ' . get_option('time_format'), (int) $st['last_run']) : __('Not yet', 'ultimate-comment-cleaner');
+                        ?>
+                        <article class="ulticocl-rule" data-rule-id="<?php echo esc_attr($id); ?>">
+                            <header class="ulticocl-rule-head">
+                                <h3><?php echo esc_html($rule['name']); ?></h3>
+                                <div class="ulticocl-rule-badges">
+                                    <span class="ulticocl-badge ulticocl-badge-action-<?php echo esc_attr($rule['action']); ?>"><?php echo esc_html($actions[$rule['action']]); ?></span>
+                                    <span class="ulticocl-badge <?php echo $rule['active'] ? 'ulticocl-badge-on' : 'ulticocl-badge-off'; ?>">
+                                        <?php echo $rule['active'] ? esc_html__('Active', 'ultimate-comment-cleaner') : esc_html__('Inactive', 'ultimate-comment-cleaner'); ?>
                                     </span>
                                 </div>
-                            </div>
-                            <div class="remove-comments-trigger-body">
-                                <p><strong><?php esc_html_e('Conditions:', 'ultimate-comment-cleaner'); ?></strong> <?php echo esc_html($this->format_trigger_conditions($trigger)); ?></p>
-                                <p><strong><?php esc_html_e('Schedule:', 'ultimate-comment-cleaner'); ?></strong> <?php echo esc_html($trigger['schedule']); ?></p>
-                                <p><strong><?php esc_html_e('Last Run:', 'ultimate-comment-cleaner'); ?></strong> <?php echo isset($trigger['last_run']) ? esc_html($trigger['last_run']) : esc_html__('Never', 'ultimate-comment-cleaner'); ?></p>
-                            </div>
-                            <div class="remove-comments-trigger-actions">
-                                <button type="button" class="remove-comments-btn-small remove-comments-btn-primary remove-comments-edit-trigger" data-id="<?php echo esc_attr($id); ?>">
-                                    <?php esc_html_e('Edit', 'ultimate-comment-cleaner'); ?>
+                            </header>
+                            <dl class="ulticocl-rule-meta">
+                                <div class="is-wide">
+                                    <dt><?php esc_html_e('Checks', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo esc_html($this->rule_summary($rule)); ?></dd>
+                                </div>
+                                <div>
+                                    <dt><?php esc_html_e('Applies to', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo esc_html($scopes[$rule['scope']]); ?></dd>
+                                </div>
+                                <div>
+                                    <dt><?php esc_html_e('Caught so far', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo esc_html(number_format_i18n(isset($st['hits']) ? (int) $st['hits'] : 0)); ?></dd>
+                                </div>
+                                <div>
+                                    <dt><?php esc_html_e('Last full scan', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo 'new' !== $rule['scope'] ? esc_html($last) : '&mdash;'; ?></dd>
+                                </div>
+                            </dl>
+                            <footer class="ulticocl-rule-actions">
+                                <button type="button" class="ulticocl-rbtn is-primary ulticocl-edit-rule" data-id="<?php echo esc_attr($id); ?>">
+                                    <span class="dashicons dashicons-edit" aria-hidden="true"></span><?php esc_html_e('Edit', 'ultimate-comment-cleaner'); ?>
                                 </button>
-                                <button type="button" class="remove-comments-btn-small remove-comments-btn-danger remove-comments-delete-trigger" data-id="<?php echo esc_attr($id); ?>">
-                                    <?php esc_html_e('Delete', 'ultimate-comment-cleaner'); ?>
+                                <button type="button" class="ulticocl-rbtn ulticocl-scan-saved" data-id="<?php echo esc_attr($id); ?>" data-dry="1">
+                                    <span class="dashicons dashicons-visibility" aria-hidden="true"></span><?php esc_html_e('Test on existing', 'ultimate-comment-cleaner'); ?>
                                 </button>
-                            </div>
-                        </div>
+                                <button type="button" class="ulticocl-rbtn ulticocl-scan-saved" data-id="<?php echo esc_attr($id); ?>" data-dry="0" data-action="<?php echo esc_attr($rule['action']); ?>">
+                                    <span class="dashicons dashicons-controls-play" aria-hidden="true"></span><?php esc_html_e('Run now', 'ultimate-comment-cleaner'); ?>
+                                </button>
+                                <button type="button" class="ulticocl-rbtn is-danger ulticocl-delete-rule" data-id="<?php echo esc_attr($id); ?>">
+                                    <span class="dashicons dashicons-trash" aria-hidden="true"></span><?php esc_html_e('Delete', 'ultimate-comment-cleaner'); ?>
+                                </button>
+                            </footer>
+                        </article>
                     <?php endforeach; ?>
                 <?php endif; ?>
             </div>
-            
-            <!-- Trigger Modal -->
-            <div id="remove-comments-trigger-modal" class="remove-comments-modal" style="display:none;">
-                <div class="remove-comments-modal-content">
+
+            <!-- Rule Modal -->
+            <div id="ulticocl-rule-modal" class="remove-comments-modal" style="display:none;">
+                <div class="remove-comments-modal-content ulticocl-wide" role="dialog" aria-modal="true" aria-labelledby="ulticocl-rule-title">
                     <span class="remove-comments-modal-close">&times;</span>
-                    <h2><?php esc_html_e('Create/Edit Trigger', 'ultimate-comment-cleaner'); ?></h2>
-                    <form id="remove-comments-trigger-form">
-                        <input type="hidden" name="trigger_id" id="remove-comments-trigger-id">
+                    <h2 id="ulticocl-rule-title"><?php esc_html_e('Smart Rule', 'ultimate-comment-cleaner'); ?></h2>
+                    <form id="ulticocl-rule-form">
+                        <input type="hidden" name="rule_id" id="ulticocl-rule-id">
+
                         <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Trigger Name', 'ultimate-comment-cleaner'); ?></label>
-                            <input type="text" name="name" id="remove-comments-trigger-name" required>
+                            <label for="ulticocl-rule-name"><?php esc_html_e('Rule name', 'ultimate-comment-cleaner'); ?></label>
+                            <input type="text" name="name" id="ulticocl-rule-name" required>
                         </div>
-                        <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Status', 'ultimate-comment-cleaner'); ?></label>
-                            <select name="status" id="remove-comments-trigger-status" class="remove-comments-select">
-                                <option value="approved"><?php esc_html_e('Approved', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="pending"><?php esc_html_e('Pending', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="spam"><?php esc_html_e('Spam', 'ultimate-comment-cleaner'); ?></option>
-                            </select>
+
+                        <label class="ulticocl-status-card" for="ulticocl-rule-active">
+                            <span class="remove-comments-toggle-switch ulticocl-large">
+                                <input type="checkbox" name="active" value="1" id="ulticocl-rule-active" checked>
+                                <span class="remove-comments-toggle-slider"></span>
+                            </span>
+                            <span class="ulticocl-status-text">
+                                <strong class="ulticocl-status-title"
+                                    data-on="<?php echo esc_attr__('Rule is active', 'ultimate-comment-cleaner'); ?>"
+                                    data-off="<?php echo esc_attr__('Rule is paused', 'ultimate-comment-cleaner'); ?>"><?php esc_html_e('Rule is active', 'ultimate-comment-cleaner'); ?></strong>
+                                <span class="ulticocl-status-help"
+                                    data-on="<?php echo esc_attr__('It checks new comments as they arrive and runs its scheduled scans.', 'ultimate-comment-cleaner'); ?>"
+                                    data-off="<?php echo esc_attr__('Nothing is checked or moved until you turn it back on. Your settings are kept.', 'ultimate-comment-cleaner'); ?>"><?php esc_html_e('It checks new comments as they arrive and runs its scheduled scans.', 'ultimate-comment-cleaner'); ?></span>
+                            </span>
+                        </label>
+
+                        <div class="ulticocl-grid-2">
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-scope"><?php esc_html_e('Check', 'ultimate-comment-cleaner'); ?></label>
+                                <select name="scope" id="ulticocl-rule-scope" class="remove-comments-select">
+                                    <?php foreach ($scopes as $value => $label) : ?>
+                                        <option value="<?php echo esc_attr($value); ?>"><?php echo esc_html($label); ?></option>
+                                    <?php endforeach; ?>
+                                </select>
+                            </div>
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-action"><?php esc_html_e('When it matches', 'ultimate-comment-cleaner'); ?></label>
+                                <select name="rule_action" id="ulticocl-rule-action" class="remove-comments-select">
+                                    <?php foreach ($actions as $value => $label) : ?>
+                                        <option value="<?php echo esc_attr($value); ?>"><?php echo esc_html($label); ?></option>
+                                    <?php endforeach; ?>
+                                </select>
+                            </div>
                         </div>
-                        <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Older Than (days)', 'ultimate-comment-cleaner'); ?></label>
-                            <input type="number" name="older_than" id="remove-comments-trigger-older" min="0">
-                        </div>
-                        <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Schedule', 'ultimate-comment-cleaner'); ?></label>
-                            <select name="schedule" id="remove-comments-trigger-schedule">
-                                <option value="hourly"><?php esc_html_e('Hourly', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="daily"><?php esc_html_e('Daily', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="weekly"><?php esc_html_e('Weekly', 'ultimate-comment-cleaner'); ?></option>
-                            </select>
-                        </div>
-                        <div class="remove-comments-form-group">
-                            <label>
-                                <div class="remove-comments-toggle-switch">
-                                    <input type="checkbox" name="active" id="remove-comments-trigger-active" checked>
-                                    <span class="remove-comments-toggle-slider"></span>
+
+                        <fieldset class="ulticocl-fieldset">
+                            <legend><?php esc_html_e('What to look for', 'ultimate-comment-cleaner'); ?></legend>
+
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-mode"><?php esc_html_e('Flag a comment when', 'ultimate-comment-cleaner'); ?></label>
+                                <select name="mode" id="ulticocl-rule-mode" class="remove-comments-select">
+                                    <option value="any"><?php esc_html_e('ANY of the checks below match', 'ultimate-comment-cleaner'); ?></option>
+                                    <option value="all"><?php esc_html_e('ALL of the checks below match', 'ultimate-comment-cleaner'); ?></option>
+                                </select>
+                            </div>
+
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-keywords"><?php esc_html_e('Keywords', 'ultimate-comment-cleaner'); ?></label>
+                                <textarea name="keywords" id="ulticocl-rule-keywords" rows="6" spellcheck="false"></textarea>
+                                <p class="description"><?php esc_html_e('One per line. "casino" matches the whole word only, "casino*" also matches casinos and casino88, "*casino*" matches anywhere, and /regular expression/ is supported. Not case sensitive.', 'ultimate-comment-cleaner'); ?></p>
+                            </div>
+
+                            <div class="remove-comments-form-group">
+                                <span class="ulticocl-sublabel"><?php esc_html_e('Search in', 'ultimate-comment-cleaner'); ?></span>
+                                <div class="ulticocl-toggle-grid" data-cols="4">
+                                    <?php
+                                    $fields = array(
+                                        'content' => __('Comment text', 'ultimate-comment-cleaner'),
+                                        'author'  => __('Name', 'ultimate-comment-cleaner'),
+                                        'email'   => __('Email', 'ultimate-comment-cleaner'),
+                                        'url'     => __('Website', 'ultimate-comment-cleaner'),
+                                    );
+                                    foreach ($fields as $value => $label) {
+                                        $this->mini_toggle('fields[]', $value, $label);
+                                    }
+                                    ?>
                                 </div>
-                                <span class="remove-comments-toggle-label"><?php esc_html_e('Active', 'ultimate-comment-cleaner'); ?></span>
-                            </label>
-                        </div>
+                            </div>
+
+                            <div class="remove-comments-form-group">
+                                <span class="ulticocl-sublabel"><?php esc_html_e('Writing system', 'ultimate-comment-cleaner'); ?></span>
+                                <div class="ulticocl-toggle-grid" data-cols="3">
+                                    <?php
+                                    foreach ($scripts as $value => $script) {
+                                        // Short name on the switch, the full name on hover.
+                                        $this->mini_toggle('scripts[]', $value, ULTICOCL_Matcher::short_label($value), '', false, $script[1]);
+                                    }
+                                    ?>
+                                </div>
+                                <p class="description ulticocl-inline-field">
+                                    <?php esc_html_e('Flag comments written mostly in the selected alphabets. At least', 'ultimate-comment-cleaner'); ?>
+                                    <input type="number" name="script_min_pct" id="ulticocl-rule-pct" min="1" max="100" class="small-text">
+                                    <?php esc_html_e('% of the letters.', 'ultimate-comment-cleaner'); ?>
+                                </p>
+                            </div>
+
+                            <div class="ulticocl-grid-3">
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-links"><?php esc_html_e('At least N links', 'ultimate-comment-cleaner'); ?></label>
+                                    <input type="number" name="min_links" id="ulticocl-rule-links" min="0">
+                                </div>
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-words"><?php esc_html_e('Shorter than N words', 'ultimate-comment-cleaner'); ?></label>
+                                    <input type="number" name="max_words" id="ulticocl-rule-words" min="0">
+                                </div>
+                                <div class="remove-comments-form-group ulticocl-field-toggle">
+                                    <?php $this->mini_toggle('has_url', '1', __('Has a website', 'ultimate-comment-cleaner'), 'ulticocl-rule-has-url'); ?>
+                                </div>
+                            </div>
+                            <p class="description"><?php esc_html_e('Use 0 to ignore links and length. Combine with "ALL" for rules like "short comment with a link".', 'ultimate-comment-cleaner'); ?></p>
+                        </fieldset>
+
+                        <fieldset class="ulticocl-fieldset ulticocl-existing-only">
+                            <legend><?php esc_html_e('Existing comments', 'ultimate-comment-cleaner'); ?></legend>
+
+                            <div class="remove-comments-form-group">
+                                <span class="ulticocl-sublabel"><?php esc_html_e('Status', 'ultimate-comment-cleaner'); ?></span>
+                                <div class="ulticocl-toggle-grid" data-cols="3">
+                                    <?php $this->mini_toggle('status[]', 'approved', __('Approved', 'ultimate-comment-cleaner')); ?>
+                                    <?php $this->mini_toggle('status[]', 'pending', __('Pending', 'ultimate-comment-cleaner')); ?>
+                                    <?php $this->mini_toggle('status[]', 'spam', __('Spam', 'ultimate-comment-cleaner')); ?>
+                                </div>
+                            </div>
+
+                            <div class="ulticocl-grid-2">
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-older"><?php esc_html_e('Only older than (days)', 'ultimate-comment-cleaner'); ?></label>
+                                    <input type="number" name="older_than" id="ulticocl-rule-older" min="0">
+                                </div>
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-schedule"><?php esc_html_e('Scan', 'ultimate-comment-cleaner'); ?></label>
+                                    <select name="schedule" id="ulticocl-rule-schedule" class="remove-comments-select">
+                                        <option value="hourly"><?php esc_html_e('Hourly', 'ultimate-comment-cleaner'); ?></option>
+                                        <option value="daily"><?php esc_html_e('Daily', 'ultimate-comment-cleaner'); ?></option>
+                                        <option value="weekly"><?php esc_html_e('Weekly', 'ultimate-comment-cleaner'); ?></option>
+                                    </select>
+                                </div>
+                            </div>
+                            <p class="description"><?php esc_html_e('Without any checks above, a rule needs an age of at least 1 day, or must target spam only.', 'ultimate-comment-cleaner'); ?></p>
+                        </fieldset>
+
                         <div class="remove-comments-form-actions">
-                            <button type="submit" class="remove-comments-btn remove-comments-btn-primary"><?php esc_html_e('Save Trigger', 'ultimate-comment-cleaner'); ?></button>
+                            <button type="submit" class="remove-comments-btn remove-comments-btn-primary"><?php esc_html_e('Save Rule', 'ultimate-comment-cleaner'); ?></button>
+                            <button type="button" id="ulticocl-test-form" class="remove-comments-btn remove-comments-btn-secondary"><?php esc_html_e('Test on existing comments', 'ultimate-comment-cleaner'); ?></button>
                             <button type="button" class="remove-comments-modal-close-btn remove-comments-modal-close" title="<?php esc_attr_e('Close', 'ultimate-comment-cleaner'); ?>">
                                 <span class="dashicons dashicons-no-alt"></span>
@@ -528 +801 @@
         <?php
     }
-    
+
+    /**
+     * Manage Comments and Quarantine tabs.
+     */
+    private function render_comments_tab($mode) {
+        require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
+        require_once ULTICOCL_PLUGIN_DIR . 'includes/class-ulticocl-comments-table.php';
+        $table = new ULTICOCL_Comments_Table($mode);
+        $table->prepare_items();
+        $days = (int) $this->get_settings()['quarantine_days'];
+        ?>
+        <div class="remove-comments-comments-panel">
+            <div class="remove-comments-panel-header ulticocl-panel-head">
+                <div class="ulticocl-panel-head-text">
+                <?php if ('quarantine' === $mode) : ?>
+                    <h2><?php esc_html_e('Quarantine', 'ultimate-comment-cleaner'); ?></h2>
+                    <p>
+                        <?php
+                        echo esc_html(
+                            $days > 0
+                                /* translators: %d: number of days */
+                                ? sprintf(_n('Comments caught by your rules wait here for %d day, then are deleted. Restore the ones that are not spam.', 'Comments caught by your rules wait here for %d days, then are deleted. Restore the ones that are not spam.', $days, 'ultimate-comment-cleaner'), $days)
+                                : __('Comments caught by your rules wait here until you restore or delete them. Automatic deletion is off (see Settings).', 'ultimate-comment-cleaner')
+                        );
+                        echo ' ' . esc_html__('A restored comment is never caught by your rules again.', 'ultimate-comment-cleaner');
+                        ?>
+                    </p>
+                <?php else : ?>
+                    <h2><?php esc_html_e('Manage Comments', 'ultimate-comment-cleaner'); ?></h2>
+                    <p><?php esc_html_e('Search, filter and clean up comments in bulk. Spam signals such as links and writing system are shown under each comment.', 'ultimate-comment-cleaner'); ?></p>
+                <?php endif; ?>
+                </div>
+                <?php if ('quarantine' === $mode) : ?>
+                    <div class="ulticocl-panel-head-actions">
+                        <button type="button" id="ulticocl-empty-quarantine" class="ulticocl-danger-btn">
+                            <span class="dashicons dashicons-trash" aria-hidden="true"></span>
+                            <?php esc_html_e('Delete all quarantined comments', 'ultimate-comment-cleaner'); ?>
+                        </button>
+                    </div>
+                <?php endif; ?>
+            </div>
+
+            <?php if ($table->is_review()) : ?>
+                <?php
+                $preview = get_transient('ulticocl_preview_' . get_current_user_id());
+                $name = is_array($preview) && !empty($preview['name']) ? $preview['name'] : '';
+                ?>
+                <div class="notice notice-info inline">
+                    <p>
+                        <?php
+                        /* translators: %s: rule name */
+                        echo esc_html(sprintf(__('Showing comments that the rule "%s" would catch. Select the ones to act on, or review them first.', 'ultimate-comment-cleaner'), $name));
+                        ?>
+                        <a href="<?php echo esc_url(add_query_arg(array('page' => 'ultimate-comment-cleaner', 'tab' => 'manage'), admin_url('tools.php'))); ?>"><?php esc_html_e('Show all comments', 'ultimate-comment-cleaner'); ?></a>
+                    </p>
+                </div>
+            <?php endif; ?>
+
+            <?php $table->render_filters(); ?>
+            <?php $table->views(); ?>
+            <form method="post">
+                <?php $table->display(); ?>
+            </form>
+        </div>
+        <?php
+    }
+
+    private function render_notice() {
+        // phpcs:disable WordPress.Security.NonceVerification.Recommended -- Display-only result message.
+        if (empty($_GET['ulticocl_notice'])) {
+            return;
+        }
+        $n = isset($_GET['ulticocl_n']) ? absint($_GET['ulticocl_n']) : 0;
+        $action = isset($_GET['ulticocl_a']) ? sanitize_key(wp_unslash($_GET['ulticocl_a'])) : '';
+        // phpcs:enable WordPress.Security.NonceVerification.Recommended
+        $messages = array(
+            /* translators: %d: number of comments */
+            'approve'    => _n('%d comment approved.', '%d comments approved.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'unapprove'  => _n('%d comment unapproved.', '%d comments unapproved.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'spam'       => _n('%d comment marked as spam.', '%d comments marked as spam.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'quarantine' => _n('%d comment moved to quarantine.', '%d comments moved to quarantine.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'restore'    => _n('%d comment restored.', '%d comments restored.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'delete'     => _n('%d comment deleted.', '%d comments deleted.', $n, 'ultimate-comment-cleaner'),
+        );
+        if (isset($messages[$action])) {
+            echo '<div class="notice notice-success is-dismissible"><p>' . esc_html(sprintf($messages[$action], $n)) . '</p></div>';
+        }
+    }
+
     private function render_settings_tab() {
-        $settings = get_option('ulticocl_settings', array());
+        $settings = $this->get_settings();
         ?>
         <div class="remove-comments-settings-panel">
             <div class="remove-comments-panel-header">
                 <h2><?php esc_html_e('Plugin Settings', 'ultimate-comment-cleaner'); ?></h2>
+                <p><?php esc_html_e('Choose what gets logged, who is told about it, and how long quarantined comments are kept.', 'ultimate-comment-cleaner'); ?></p>
             </div>
             
@@ -588 +955 @@
                     </div>
                 </div>
+
+                <div class="remove-comments-form-section">
+                    <h3><?php esc_html_e('Quarantine', 'ultimate-comment-cleaner'); ?></h3>
+                    <div class="remove-comments-form-group">
+                        <label for="ulticocl_quarantine_days"><?php esc_html_e('Delete quarantined comments after (days)', 'ultimate-comment-cleaner'); ?></label>
+                        <input type="number" name="quarantine_days" id="ulticocl_quarantine_days" min="0" max="365" value="<?php echo esc_attr((int) $settings['quarantine_days']); ?>" class="small-text">
+                        <p class="description"><?php esc_html_e('Quarantined comments are hidden from your site and can be restored until then. Use 0 to keep them until you delete them yourself.', 'ultimate-comment-cleaner'); ?></p>
+                    </div>
+                    <div class="remove-comments-form-group">
+                        <label for="ulticocl_allowlist"><?php esc_html_e('Never touch comments from', 'ultimate-comment-cleaner'); ?></label>
+                        <textarea name="allowlist" id="ulticocl_allowlist" rows="4" class="remove-comments-form-input" placeholder="friend@example.com&#10;@mycompany.com"><?php echo esc_textarea($settings['allowlist']); ?></textarea>
+                        <p class="description"><?php esc_html_e('One email address or @domain per line. Rules skip these commenters. Comments by users who can moderate comments are always skipped.', 'ultimate-comment-cleaner'); ?></p>
+                    </div>
+                </div>
                 
                 <div class="remove-comments-form-actions">
@@ -599 +980 @@
     private function get_comment_stats() {
         global $wpdb;
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct queries needed for comment counts, caching not practical for real-time stats
-        $stats = array(
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for total comments count
-            'total' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for approved comments count
-            'approved' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = '1' AND comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for pending comments count
-            'pending' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = '0' AND comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for spam comments count
-            'spam' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = 'spam' AND comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for trash comments count
-            'trash' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = 'trash' AND comment_type = 'comment'"),
-            'triggers' => count(get_option('ulticocl_triggers', array()))
+
+        $types = $this->types_sql();
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- One grouped count; $types is prepared in types_sql().
+        $rows = $wpdb->get_results("SELECT comment_approved AS status, COUNT(*) AS n FROM $wpdb->comments WHERE $types GROUP BY comment_approved", OBJECT_K);
+        $rows = is_array($rows) ? $rows : array();
+        $count = function ($status) use ($rows) {
+            return isset($rows[$status]) ? (int) $rows[$status]->n : 0;
+        };
+
+        return array(
+            'total'      => (int) array_sum(wp_list_pluck($rows, 'n')),
+            'approved'   => $count('1'),
+            'pending'    => $count('0'),
+            'spam'       => $count('spam'),
+            'trash'      => $count('trash'),
+            'quarantine' => $count(self::QUARANTINE),
+            'rules'      => count($this->get_rules()),
+            'caught'     => (int) array_sum(wp_list_pluck((array) get_option('ulticocl_rule_state', array()), 'hits')),
         );
-        
-        return $stats;
-    }
-    
+    }
+
+    /**
+     * Prepared "comment_type IN (...)" fragment for the types this plugin manages.
+     */
+    private function types_sql() {
+        global $wpdb;
+        return $wpdb->prepare('comment_type IN (' . implode(',', array_fill(0, count(self::TYPES), '%s')) . ')', self::TYPES);
+    }
+
     private function get_comment_authors() {
         global $wpdb;
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed for author list, caching not practical
-        return $wpdb->get_results("SELECT DISTINCT comment_author, comment_author_email FROM $wpdb->comments WHERE comment_type = 'comment' AND comment_author_email != '' ORDER BY comment_author ASC LIMIT 200");
-    }
-    
+        $types = $this->types_sql();
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- Direct query needed for author list, caching not practical; $types is prepared in types_sql().
+        return $wpdb->get_results("SELECT DISTINCT comment_author, comment_author_email FROM $wpdb->comments WHERE $types AND comment_author_email != '' ORDER BY comment_author ASC LIMIT 200");
+    }
+
     private function render_recent_activity() {
         $activities = get_option('ulticocl_activity_log', array());
@@ -630 +1022 @@
             return;
         }
-        
+
         $activities = array_slice(array_reverse($activities), 0, 10);
         foreach ($activities as $activity) {
@@ -639 +1031 @@
         }
     }
-    
-    private function format_trigger_conditions($trigger) {
-        $conditions = array();
-        if (isset($trigger['status'])) {
-            $conditions[] = esc_html__('Status:', 'ultimate-comment-cleaner') . ' ' . esc_html($trigger['status']);
-        }
-        if (isset($trigger['older_than'])) {
-            $conditions[] = esc_html__('Older than:', 'ultimate-comment-cleaner') . ' ' . intval($trigger['older_than']) . ' ' . esc_html__('days', 'ultimate-comment-cleaner');
-        }
-        return implode(', ', $conditions);
-    }
-    
-    public function ajax_delete_comments() {
+
+    private function action_labels() {
+        return array(
+            'quarantine' => __('Quarantine', 'ultimate-comment-cleaner'),
+            'spam'       => __('Mark as spam', 'ultimate-comment-cleaner'),
+            'delete'     => __('Delete permanently', 'ultimate-comment-cleaner'),
+        );
+    }
+
+    private function action_message($action, $n) {
+        $messages = array(
+            /* translators: %d: number of comments */
+            'delete'     => _n('Deleted %d comment.', 'Deleted %d comments.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'quarantine' => _n('Moved %d comment to quarantine.', 'Moved %d comments to quarantine.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'spam'       => _n('Marked %d comment as spam.', 'Marked %d comments as spam.', $n, 'ultimate-comment-cleaner'),
+        );
+        return sprintf($messages[$action], $n);
+    }
+
+    /**
+     * One-line description of what a rule checks, for the rules list.
+     */
+    private function rule_summary($rule) {
+        $parts = array();
+        if (!empty($rule['keywords'])) {
+            $shown = array_slice($rule['keywords'], 0, 3);
+            $more = count($rule['keywords']) - count($shown);
+            /* translators: 1: sample keywords, 2: number of additional keywords */
+            $parts[] = $more > 0 ? sprintf(__('keywords %1$s (+%2$d more)', 'ultimate-comment-cleaner'), implode(', ', $shown), $more) : sprintf(__('keywords %s', 'ultimate-comment-cleaner'), implode(', ', $shown));
+        }
+        if (!empty($rule['scripts'])) {
+            $scripts = ULTICOCL_Matcher::scripts();
+            $labels = array();
+            foreach ($rule['scripts'] as $key) {
+                if (isset($scripts[$key])) {
+                    $labels[] = ULTICOCL_Matcher::short_label($key);
+                }
+            }
+            /* translators: 1: writing systems, 2: percentage */
+            $parts[] = sprintf(__('%1$s text (%2$d%%+)', 'ultimate-comment-cleaner'), implode('/', $labels), (int) $rule['script_min_pct']);
+        }
+        if (!empty($rule['min_links'])) {
+            /* translators: %d: number of links */
+            $parts[] = sprintf(_n('%d+ link', '%d+ links', (int) $rule['min_links'], 'ultimate-comment-cleaner'), (int) $rule['min_links']);
+        }
+        if (!empty($rule['has_url'])) {
+            $parts[] = __('has a website', 'ultimate-comment-cleaner');
+        }
+        if (!empty($rule['max_words'])) {
+            /* translators: %d: number of words */
+            $parts[] = sprintf(__('under %d words', 'ultimate-comment-cleaner'), (int) $rule['max_words']);
+        }
+        $glue = 'all' === $rule['mode'] ? ' ' . __('AND', 'ultimate-comment-cleaner') . ' ' : ' ' . __('OR', 'ultimate-comment-cleaner') . ' ';
+        $text = implode($glue, $parts);
+
+        if ('new' !== $rule['scope']) {
+            $scope = array();
+            $scope[] = sprintf(
+                /* translators: %s: comment statuses */
+                __('status: %s', 'ultimate-comment-cleaner'),
+                implode(', ', (array) $rule['status'])
+            );
+            if (!empty($rule['older_than'])) {
+                /* translators: %d: number of days */
+                $scope[] = sprintf(_n('older than %d day', 'older than %d days', (int) $rule['older_than'], 'ultimate-comment-cleaner'), (int) $rule['older_than']);
+            }
+            $text .= ('' !== $text ? ' (' : '') . implode(', ', $scope) . ('' !== $text ? ')' : '');
+        }
+        return $text;
+    }
+
+    // phpcs:disable WordPress.Security.NonceVerification.Missing -- The AJAX handlers below verify the nonce in verify_ajax().
+
+    private function verify_ajax() {
         check_ajax_referer('ulticocl_nonce', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
             wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
         }
-        
+    }
+
+    /**
+     * Process one batch of matching comments. The admin JS calls this repeatedly
+     * until `done` is true, so large clean-ups never hit request time limits.
+     */
+    public function ajax_bulk_process() {
+        $this->verify_ajax();
+
         $filters = $this->extract_filter_params();
-        $deleted = $this->delete_comments_by_filters($filters);
-        
-        // translators: %d: number of comments deleted
-        $this->log_activity(sprintf(esc_html__('Deleted %d comments', 'ultimate-comment-cleaner'), $deleted));
-        $this->send_email_notification($deleted, 'manual');
-        
+        $action = $filters['clean_action'];
+        $processed = $this->process_by_filters($filters);
+        $remaining = $this->count_comments_by_filters($filters);
+        $total = (isset($_POST['processed_so_far']) ? absint($_POST['processed_so_far']) : 0) + $processed;
+        // Nothing processed this round means we are finished, or blocked (e.g. by another plugin): stop either way.
+        $done = 0 === $processed || 0 === $remaining;
+
+        if ($done && $total > 0) {
+            $this->log_activity($this->action_message($action, $total));
+            $this->send_email_notification($total, 'manual', $action);
+        }
+
         wp_send_json_success(array(
-            // translators: %d: number of comments deleted
-            'message' => sprintf(esc_html__('Successfully deleted %d comments.', 'ultimate-comment-cleaner'), $deleted),
-            'count' => $deleted
+            'processed' => $processed,
+            'total' => $total,
+            'remaining' => $remaining,
+            'done' => $done,
+            'message' => $this->action_message($action, $total),
         ));
     }
-    
-    public function ajax_get_stats() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        wp_send_json_success($this->get_comment_stats());
-    }
-    
+
+    /**
+     * Dashboard data for a date range. The range is remembered per user.
+     */
+    public function ajax_dashboard() {
+        $this->verify_ajax();
+
+        $days = isset($_POST['days']) ? absint($_POST['days']) : 30;
+        if (!in_array($days, ULTICOCL_Insights::RANGES, true)) {
+            $days = 30;
+        }
+        update_user_meta(get_current_user_id(), 'ulticocl_dash_days', $days);
+        wp_send_json_success(ULTICOCL_Insights::collect($days, $this->get_comment_stats()));
+    }
+
     public function ajax_export_comments() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
+        $this->verify_ajax();
+
         $filters = $this->extract_filter_params();
+        unset($filters['clean_action']); // Export everything that matches, including quarantined comments.
         $this->export_comments($filters);
     }
-    
-    public function ajax_save_trigger() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $triggers = get_option('ulticocl_triggers', array());
-        $trigger_id = isset($_POST['trigger_id']) ? sanitize_text_field(wp_unslash($_POST['trigger_id'])) : uniqid('trigger_');
-        
-        // Preserve existing trigger data if editing
-        $existing_trigger = isset($triggers[$trigger_id]) ? $triggers[$trigger_id] : array();
-        
-        $triggers[$trigger_id] = array(
-            'name' => isset($_POST['name']) ? sanitize_text_field(wp_unslash($_POST['name'])) : '',
-            'status' => isset($_POST['status']) ? sanitize_text_field(wp_unslash($_POST['status'])) : 'approved',
-            'older_than' => isset($_POST['older_than']) ? intval($_POST['older_than']) : 0,
-            'schedule' => isset($_POST['schedule']) ? sanitize_text_field(wp_unslash($_POST['schedule'])) : 'hourly',
-            'active' => isset($_POST['active']) && intval($_POST['active']) === 1,
-            'created' => isset($existing_trigger['created']) ? $existing_trigger['created'] : current_time('mysql'),
-            'last_run' => isset($existing_trigger['last_run']) ? $existing_trigger['last_run'] : null
-        );
-        
-        update_option('ulticocl_triggers', $triggers);
-        wp_send_json_success(array('message' => __('Trigger saved successfully.', 'ultimate-comment-cleaner')));
-    }
-    
-    public function ajax_delete_trigger() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $trigger_id = isset($_POST['trigger_id']) ? sanitize_text_field(wp_unslash($_POST['trigger_id'])) : '';
-        $triggers = get_option('ulticocl_triggers', array());
-        
-        if (isset($triggers[$trigger_id])) {
-            unset($triggers[$trigger_id]);
-            update_option('ulticocl_triggers', $triggers);
-            wp_send_json_success(array('message' => __('Trigger deleted successfully.', 'ultimate-comment-cleaner')));
-        }
-        
-        wp_send_json_error(array('message' => __('Trigger not found.', 'ultimate-comment-cleaner')));
-    }
-    
-    public function ajax_get_trigger() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $trigger_id = isset($_POST['trigger_id']) ? sanitize_text_field(wp_unslash($_POST['trigger_id'])) : '';
-        $triggers = get_option('ulticocl_triggers', array());
-        
-        if (isset($triggers[$trigger_id])) {
-            wp_send_json_success($triggers[$trigger_id]);
-        }
-        
-        wp_send_json_error(array('message' => __('Trigger not found.', 'ultimate-comment-cleaner')));
-    }
-    
+
     public function ajax_preview_count() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $filters = $this->extract_filter_params();
-        $count = $this->count_comments_by_filters($filters);
-        
-        wp_send_json_success(array('count' => $count));
-    }
-    
+        $this->verify_ajax();
+
+        wp_send_json_success(array('count' => $this->count_comments_by_filters($this->extract_filter_params())));
+    }
+
+    public function ajax_save_rule() {
+        $this->verify_ajax();
+
+        $rule = $this->rule_from_post();
+        if (is_wp_error($rule)) {
+            wp_send_json_error(array('message' => $rule->get_error_message()));
+        }
+
+        $rules = $this->get_rules();
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        // Only reuse an ID that already exists; anything else is a new rule.
+        if ('' === $id || !isset($rules[$id])) {
+            $id = uniqid('rule_');
+        }
+        $rule['created'] = !empty($rules[$id]['created']) ? $rules[$id]['created'] : current_time('mysql');
+        $rules[$id] = $rule;
+        update_option('ulticocl_rules', $rules, false);
+
+        // An edited rule is scanned from the start again.
+        $state = get_option('ulticocl_rule_state', array());
+        $state[$id] = array_merge(array('hits' => 0, 'last_run' => 0), isset($state[$id]) ? $state[$id] : array(), array('cursor' => 0));
+        update_option('ulticocl_rule_state', $state, false);
+
+        wp_send_json_success(array('message' => __('Rule saved.', 'ultimate-comment-cleaner'), 'id' => $id));
+    }
+
+    public function ajax_delete_rule() {
+        $this->verify_ajax();
+
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        $rules = $this->get_rules();
+        if (!isset($rules[$id])) {
+            wp_send_json_error(array('message' => __('Rule not found.', 'ultimate-comment-cleaner')));
+        }
+        unset($rules[$id]);
+        update_option('ulticocl_rules', $rules, false);
+        $state = get_option('ulticocl_rule_state', array());
+        unset($state[$id]);
+        update_option('ulticocl_rule_state', $state, false);
+        wp_send_json_success(array('message' => __('Rule deleted.', 'ultimate-comment-cleaner')));
+    }
+
+    public function ajax_get_rule() {
+        $this->verify_ajax();
+
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        $rules = $this->get_rules();
+        if (!isset($rules[$id])) {
+            wp_send_json_error(array('message' => __('Rule not found.', 'ultimate-comment-cleaner')));
+        }
+        wp_send_json_success($rules[$id]);
+    }
+
+    /**
+     * Scan one chunk of existing comments with a rule. With `dry` set nothing is changed:
+     * the matches are counted and sampled, and their IDs are kept for "Review matches".
+     */
+    public function ajax_scan_rule() {
+        $this->verify_ajax();
+
+        $dry = !empty($_POST['dry']);
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        $rules = $this->get_rules();
+
+        if (!$dry) {
+            if (!isset($rules[$id])) {
+                wp_send_json_error(array('message' => __('Save the rule before running it.', 'ultimate-comment-cleaner')));
+            }
+            $rule = $rules[$id];
+        } elseif (isset($_POST['name'])) {
+            $rule = $this->rule_from_post();
+            if (is_wp_error($rule)) {
+                wp_send_json_error(array('message' => $rule->get_error_message()));
+            }
+        } elseif (isset($rules[$id])) {
+            $rule = $rules[$id];
+        } else {
+            wp_send_json_error(array('message' => __('Rule not found.', 'ultimate-comment-cleaner')));
+        }
+
+        $cursor = isset($_POST['cursor']) ? absint($_POST['cursor']) : 0;
+        $result = $this->scan_rule($rule, $cursor, self::BATCH_SIZE, $dry, $id);
+        if (is_wp_error($result)) {
+            wp_send_json_error(array('message' => $result->get_error_message()));
+        }
+
+        if (0 === $cursor) {
+            $result['total'] = $this->count_scope($rule);
+        }
+
+        if ($dry) {
+            $key = 'ulticocl_preview_' . get_current_user_id();
+            $preview = get_transient($key);
+            if (0 === $cursor || !is_array($preview)) {
+                $preview = array('name' => $rule['name'], 'ids' => array());
+            }
+            $preview['ids'] = array_slice(array_merge($preview['ids'], $result['ids']), 0, 1000);
+            set_transient($key, $preview, HOUR_IN_SECONDS);
+        } else {
+            $this->add_hits($id, $result['acted']);
+            $this->record_stat('scan', $result['acted'], $id);
+            $acted = (isset($_POST['acted_so_far']) ? absint($_POST['acted_so_far']) : 0) + $result['acted'];
+            if ($result['done'] && $acted > 0) {
+                /* translators: 1: rule name, 2: result sentence */
+                $this->log_activity(sprintf(__('Rule "%1$s" run manually: %2$s', 'ultimate-comment-cleaner'), $rule['name'], $this->action_message($rule['action'], $acted)));
+                $this->send_email_notification($acted, $rule['name'], $rule['action']);
+            }
+        }
+        unset($result['ids']);
+
+        wp_send_json_success($result);
+    }
+
     /**
      * Extract and sanitize filter parameters from $_POST
@@ -772 +1292 @@
     private function extract_filter_params() {
         $filters = array();
-        
+
         // Status filter (array)
         if (isset($_POST['status']) && is_array($_POST['status'])) {
-            $filters['status'] = array_map('sanitize_text_field', wp_unslash($_POST['status']));
-        }
-        
+            $filters['status'] = array_map('sanitize_key', wp_unslash($_POST['status']));
+        }
+
         // Date range
-        if (isset($_POST['date_from']) && !empty($_POST['date_from'])) {
+        if (!empty($_POST['date_from'])) {
             $filters['date_from'] = sanitize_text_field(wp_unslash($_POST['date_from']));
         }
-        if (isset($_POST['date_to']) && !empty($_POST['date_to'])) {
+        if (!empty($_POST['date_to'])) {
             $filters['date_to'] = sanitize_text_field(wp_unslash($_POST['date_to']));
         }
-        
+
         // Author filter
-        if (isset($_POST['author']) && !empty($_POST['author'])) {
+        if (!empty($_POST['author'])) {
             $filters['author'] = sanitize_text_field(wp_unslash($_POST['author']));
         }
-        
+
+        // Search text
+        if (!empty($_POST['search'])) {
+            $filters['search'] = sanitize_text_field(wp_unslash($_POST['search']));
+        }
+
         // Post type filter (array)
         if (isset($_POST['post_type']) && is_array($_POST['post_type'])) {
             $filters['post_type'] = array_map('sanitize_key', wp_unslash($_POST['post_type']));
         }
-        
+
         // Additional filters (boolean flags)
-        if (isset($_POST['has_url']) && !empty($_POST['has_url'])) {
-            $filters['has_url'] = 1;
-        }
-        if (isset($_POST['no_url']) && !empty($_POST['no_url'])) {
-            $filters['no_url'] = 1;
-        }
-        if (isset($_POST['short_comments']) && !empty($_POST['short_comments'])) {
-            $filters['short_comments'] = 1;
-        }
-        
+        $filters['has_url'] = !empty($_POST['has_url']);
+        $filters['no_url'] = !empty($_POST['no_url']);
+        $filters['short_comments'] = !empty($_POST['short_comments']);
+
         // Word count filters
-        if (isset($_POST['min_words']) && !empty($_POST['min_words'])) {
-            $filters['min_words'] = intval($_POST['min_words']);
-        }
-        if (isset($_POST['max_words']) && !empty($_POST['max_words'])) {
-            $filters['max_words'] = intval($_POST['max_words']);
-        }
-        
+        $filters['min_words'] = isset($_POST['min_words']) ? absint($_POST['min_words']) : 0;
+        $filters['max_words'] = isset($_POST['max_words']) ? absint($_POST['max_words']) : 0;
+
+        // What to do with the matches; anything unknown falls back to the safe, restorable option.
+        $action = isset($_POST['clean_action']) ? sanitize_key(wp_unslash($_POST['clean_action'])) : '';
+        $filters['clean_action'] = in_array($action, ULTICOCL_Matcher::ACTIONS, true) ? $action : 'quarantine';
+
         return $filters;
     }
-    
+
+    /**
+     * Build a rule from the rule form in $_POST.
+     *
+     * @return array|WP_Error Canonical rule, or an error describing what to fix.
+     */
+    private function rule_from_post() {
+        $p = wp_unslash($_POST); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Every field is sanitized below.
+        $text = function ($key) use ($p) {
+            return isset($p[$key]) && is_string($p[$key]) ? sanitize_text_field($p[$key]) : '';
+        };
+        $keys = function ($key) use ($p) {
+            return isset($p[$key]) && is_array($p[$key]) ? array_map('sanitize_key', $p[$key]) : array();
+        };
+        $int = function ($key, $max) use ($p) {
+            return isset($p[$key]) ? min($max, absint($p[$key])) : 0;
+        };
+
+        $rule = ULTICOCL_Matcher::defaults();
+        $rule['name'] = $text('name');
+        $rule['active'] = !empty($p['active']);
+        $rule['mode'] = 'all' === $text('mode') ? 'all' : 'any';
+        $scope = $text('scope');
+        $rule['scope'] = in_array($scope, ULTICOCL_Matcher::SCOPES, true) ? $scope : 'both';
+        $action = $text('rule_action');
+        $rule['action'] = in_array($action, ULTICOCL_Matcher::ACTIONS, true) ? $action : 'quarantine';
+        $schedule = $text('schedule');
+        $rule['schedule'] = in_array($schedule, self::SCHEDULES, true) ? $schedule : 'daily';
+
+        $raw = isset($p['keywords']) && is_string($p['keywords']) ? sanitize_textarea_field($p['keywords']) : '';
+        // Not /\R/: without the u flag it treats byte 0x85 as a newline and would cut Cyrillic letters in half.
+        $lines = array_filter(array_map('trim', preg_split('/\r\n|\r|\n/', $raw)), 'strlen');
+        $rule['keywords'] = array_slice(array_values(array_unique($lines)), 0, 500);
+        $invalid = array();
+        foreach ($rule['keywords'] as $keyword) {
+            if (null === ULTICOCL_Matcher::keyword_regex($keyword)) {
+                $invalid[] = $keyword;
+            }
+        }
+
+        $fields = array_values(array_intersect($keys('fields'), ULTICOCL_Matcher::FIELDS));
+        $rule['fields'] = $fields ? $fields : array('content', 'author', 'url');
+        $rule['scripts'] = array_values(array_intersect($keys('scripts'), array_keys(ULTICOCL_Matcher::scripts())));
+        $rule['script_min_pct'] = max(1, $int('script_min_pct', 100));
+        $rule['min_links'] = $int('min_links', 100);
+        $rule['has_url'] = !empty($p['has_url']);
+        $rule['max_words'] = $int('max_words', 1000);
+        $status = array_values(array_intersect($keys('status'), ULTICOCL_Matcher::RULE_STATUSES));
+        $rule['status'] = $status ? $status : ULTICOCL_Matcher::RULE_STATUSES;
+        $rule['older_than'] = $int('older_than', 3650);
+
+        if ('' === $rule['name']) {
+            return new WP_Error('name', __('Please enter a rule name.', 'ultimate-comment-cleaner'));
+        }
+        if ($invalid) {
+            /* translators: %s: invalid keyword lines */
+            return new WP_Error('keywords', sprintf(__('These keywords are not valid: %s', 'ultimate-comment-cleaner'), implode(', ', array_slice($invalid, 0, 3))));
+        }
+        if (!ULTICOCL_Matcher::has_signals($rule)) {
+            if ('new' === $rule['scope']) {
+                return new WP_Error('signals', __('Rules for new comments need at least one check: keywords, a writing system, links, a website or short comments.', 'ultimate-comment-cleaner'));
+            }
+            $rule['scope'] = 'existing'; // Nothing to look for in a new comment.
+        }
+        if (!ULTICOCL_Matcher::scope_is_safe($rule)) {
+            return new WP_Error('unsafe', __('This rule would match every comment. Add a check, set "Only older than" to at least 1 day, or select Spam only.', 'ultimate-comment-cleaner'));
+        }
+
+        return $rule;
+    }
+
+    // phpcs:enable WordPress.Security.NonceVerification.Missing
+
+    /**
+     * Build the SQL WHERE clause shared by preview count, bulk clean and export.
+     *
+     * Fails closed: a filter that is present but invalid matches nothing, so a bad
+     * request can never widen a bulk action to every comment.
+     *
+     * @param array $filters Sanitized filters.
+     * @return string|false WHERE clause, or false when nothing can match.
+     */
+    private function build_where($filters) {
+        global $wpdb;
+
+        $where = array($this->types_sql());
+
+        // Status is required; 'all' means no status restriction.
+        if (empty($filters['status'])) {
+            return false;
+        }
+        if (!in_array('all', $filters['status'], true)) {
+            $statuses = array_values(array_intersect_key(self::STATUS_MAP, array_flip($filters['status'])));
+            if (empty($statuses)) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_approved IN (' . implode(',', array_fill(0, count($statuses), '%s')) . ')', $statuses);
+        }
+
+        // Skip comments the action cannot change, so each batch makes progress.
+        if (isset($filters['clean_action'])) {
+            if ('quarantine' === $filters['clean_action']) {
+                $where[] = $wpdb->prepare('comment_approved != %s', self::QUARANTINE);
+            } elseif ('spam' === $filters['clean_action']) {
+                $where[] = $wpdb->prepare('comment_approved NOT IN (%s, %s)', 'spam', self::QUARANTINE);
+            }
+        }
+
+        // Date range (site local time, as entered by the admin)
+        if (!empty($filters['date_from'])) {
+            if (!$this->is_valid_date($filters['date_from'])) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_date >= %s', $filters['date_from'] . ' 00:00:00');
+        }
+        if (!empty($filters['date_to'])) {
+            if (!$this->is_valid_date($filters['date_to'])) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_date <= %s', $filters['date_to'] . ' 23:59:59');
+        }
+
+        // Author filter
+        if (!empty($filters['author']) && 'all' !== $filters['author']) {
+            if (!is_email($filters['author'])) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_author_email = %s', $filters['author']);
+        }
+
+        // Search text
+        if (!empty($filters['search'])) {
+            $like = '%' . $wpdb->esc_like($filters['search']) . '%';
+            $where[] = $wpdb->prepare('(comment_content LIKE %s OR comment_author LIKE %s OR comment_author_email LIKE %s OR comment_author_url LIKE %s)', $like, $like, $like, $like);
+        }
+
+        // Post type filter
+        if (!empty($filters['post_type']) && !in_array('all', $filters['post_type'], true)) {
+            $where[] = $wpdb->prepare(
+                "comment_post_ID IN (SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($filters['post_type']), '%s')) . '))',
+                $filters['post_type']
+            );
+        }
+
+        // URL filters
+        if (!empty($filters['has_url'])) {
+            $where[] = "comment_author_url != ''";
+        }
+        if (!empty($filters['no_url'])) {
+            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
+        }
+
+        // ponytail: word count = spaces + 1; newlines and double spaces skew it. Good enough for spam triage.
+        $words = "LENGTH(TRIM(comment_content)) - LENGTH(REPLACE(TRIM(comment_content), ' ', '')) + 1";
+        if (!empty($filters['short_comments'])) {
+            $where[] = "$words < 10";
+        }
+        if (!empty($filters['min_words'])) {
+            // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- $words is a fixed SQL expression
+            $where[] = $wpdb->prepare("$words >= %d", $filters['min_words']);
+        }
+        if (!empty($filters['max_words'])) {
+            // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- $words is a fixed SQL expression
+            $where[] = $wpdb->prepare("$words <= %d", $filters['max_words']);
+        }
+
+        return implode(' AND ', $where);
+    }
+
+    private function is_valid_date($value) {
+        $date = DateTime::createFromFormat('Y-m-d', $value);
+        return $date && $date->format('Y-m-d') === $value;
+    }
+
     private function count_comments_by_filters($filters) {
         global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        // Status filter
-        if (isset($filters['status']) && is_array($filters['status'])) {
-            $statuses = array();
-            foreach ($filters['status'] as $status) {
-                if ($status === 'all') continue;
-                $statuses[] = $wpdb->prepare("comment_approved = %s", $status === 'approved' ? '1' : ($status === 'pending' ? '0' : $status));
-            }
-            if (!empty($statuses)) {
-                $where[] = '(' . implode(' OR ', $statuses) . ')';
-            }
-        }
-        
-        // Date range
-        if (!empty($filters['date_from'])) {
-            $where[] = $wpdb->prepare("comment_date >= %s", $filters['date_from'] . ' 00:00:00');
-        }
-        if (!empty($filters['date_to'])) {
-            $where[] = $wpdb->prepare("comment_date <= %s", $filters['date_to'] . ' 23:59:59');
-        }
-        
-        // Author filter
-        if (isset($filters['author']) && !empty($filters['author']) && $filters['author'] !== 'all') {
-            $author_email = sanitize_email($filters['author']);
-            if (is_email($author_email)) {
-                $where[] = $wpdb->prepare("comment_author_email = %s", $author_email);
-            }
-        }
-        
-        // Post type filter
-        if (isset($filters['post_type']) && is_array($filters['post_type']) && !in_array('all', $filters['post_type'])) {
-            // Sanitize post types
-            $post_types = array_map('sanitize_key', $filters['post_type']);
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed, caching not practical
-            $post_ids = $wpdb->get_col($wpdb->prepare(
-                "SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($post_types), '%s')) . ")",
-                ...$post_types
-            ));
-            if (!empty($post_ids)) {
-                $where[] = "comment_post_ID IN (" . implode(',', array_map('intval', $post_ids)) . ")";
-            } else {
-                return 0; // No posts found, so no comments
-            }
-        }
-        
-        // Additional filters
-        if (!empty($filters['has_url'])) {
-            $where[] = "comment_author_url != ''";
-        }
-        if (!empty($filters['no_url'])) {
-            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
-        }
-        
-        // Word count filters - sanitize inputs
-        if (!empty($filters['short_comments'])) {
-            $where[] = "LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 < 10";
-        }
-        if (!empty($filters['min_words'])) {
-            $min_words = intval($filters['min_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 >= %d", $min_words);
-        }
-        if (!empty($filters['max_words'])) {
-            $max_words = intval($filters['max_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 <= %d", $max_words);
-        }
-        
-        $where_clause = implode(' AND ', $where);
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-        return (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE $where_clause");
-    }
-    
-    private function delete_comments_by_filters($filters) {
+
+        $where = $this->build_where($filters);
+        if (false === $where) {
+            return 0;
+        }
+
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in build_where()
+        return (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE $where");
+    }
+
+    /**
+     * Apply the chosen action to up to one batch of matching comments.
+     *
+     * @return int Number of comments changed.
+     */
+    private function process_by_filters($filters) {
         global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        // Status filter
-        if (isset($filters['status']) && is_array($filters['status'])) {
-            $statuses = array();
-            foreach ($filters['status'] as $status) {
-                if ($status === 'all') continue;
-                $statuses[] = $wpdb->prepare("comment_approved = %s", $status === 'approved' ? '1' : ($status === 'pending' ? '0' : $status));
-            }
-            if (!empty($statuses)) {
-                $where[] = '(' . implode(' OR ', $statuses) . ')';
-            }
-        }
-        
-        // Date range
-        if (!empty($filters['date_from'])) {
-            $where[] = $wpdb->prepare("comment_date >= %s", $filters['date_from'] . ' 00:00:00');
-        }
-        if (!empty($filters['date_to'])) {
-            $where[] = $wpdb->prepare("comment_date <= %s", $filters['date_to'] . ' 23:59:59');
-        }
-        
-        // Author filter
-        if (isset($filters['author']) && !empty($filters['author']) && $filters['author'] !== 'all') {
-            $author_email = sanitize_email($filters['author']);
-            if (is_email($author_email)) {
-                $where[] = $wpdb->prepare("comment_author_email = %s", $author_email);
-            }
-        }
-        
-        // Post type filter
-        if (isset($filters['post_type']) && is_array($filters['post_type']) && !in_array('all', $filters['post_type'])) {
-            // Sanitize post types
-            $post_types = array_map('sanitize_key', $filters['post_type']);
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed, caching not practical
-            $post_ids = $wpdb->get_col($wpdb->prepare(
-                "SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($post_types), '%s')) . ")",
-                ...$post_types
-            ));
-            if (!empty($post_ids)) {
-                $where[] = "comment_post_ID IN (" . implode(',', array_map('intval', $post_ids)) . ")";
-            } else {
-                return 0; // No posts found, so no comments
-            }
-        }
-        
-        // Additional filters
-        if (!empty($filters['has_url'])) {
-            $where[] = "comment_author_url != ''";
-        }
-        if (!empty($filters['no_url'])) {
-            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
-        }
-        
-        // Word count filters - sanitize inputs
-        if (!empty($filters['short_comments'])) {
-            $where[] = "LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 < 10";
-        }
-        if (!empty($filters['min_words'])) {
-            $min_words = intval($filters['min_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 >= %d", $min_words);
-        }
-        if (!empty($filters['max_words'])) {
-            $max_words = intval($filters['max_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 <= %d", $max_words);
-        }
-        
-        $where_clause = implode(' AND ', $where);
-        
-        // Get comment IDs and post IDs BEFORE deletion (WordPress standard way)
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-        $comments = $wpdb->get_results("SELECT comment_ID, comment_post_ID FROM $wpdb->comments WHERE $where_clause");
-        
-        if (empty($comments)) {
+
+        $where = $this->build_where($filters);
+        if (false === $where) {
             return 0;
         }
-        
-        $count = count($comments);
-        $comment_ids = array();
-        $post_ids = array();
-        
-        // Collect comment IDs and unique post IDs
-        foreach ($comments as $comment) {
-            $comment_ids[] = (int) $comment->comment_ID;
-            $post_ids[(int) $comment->comment_post_ID] = true;
-        }
-        
-        $post_ids = array_keys($post_ids);
-        
-        // Use WordPress function to properly delete comments and clean up
+
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in build_where()
+        $comment_ids = $wpdb->get_col($wpdb->prepare("SELECT comment_ID FROM $wpdb->comments WHERE $where ORDER BY comment_ID LIMIT %d", self::BATCH_SIZE));
+
+        // Recount each affected post once at the end instead of after every comment.
+        wp_defer_comment_counting(true);
+        $changed = 0;
         foreach ($comment_ids as $comment_id) {
-            wp_delete_comment($comment_id, true); // true = force delete (skip trash)
-        }
-        
-        // Clean up post comment counts
-        if (!empty($post_ids)) {
-            foreach ($post_ids as $post_id) {
-                clean_post_cache($post_id);
-                wp_update_comment_count_now($post_id);
-            }
-        }
-        
-        // Clear caches
-        wp_cache_flush();
-        delete_transient('ulticocl_comments_count');
-        
-        return (int) $count;
-    }
-    
+            if ($this->comment_action((int) $comment_id, $filters['clean_action'])) {
+                $changed++;
+            }
+        }
+        wp_defer_comment_counting(false);
+
+        return $changed;
+    }
+
     private function export_comments($filters) {
         global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        // Status filter
-        if (isset($filters['status']) && is_array($filters['status'])) {
-            $statuses = array();
-            foreach ($filters['status'] as $status) {
-                if ($status === 'all') continue;
-                $statuses[] = $wpdb->prepare("comment_approved = %s", $status === 'approved' ? '1' : ($status === 'pending' ? '0' : $status));
-            }
-            if (!empty($statuses)) {
-                $where[] = '(' . implode(' OR ', $statuses) . ')';
-            }
-        }
-        
-        // Date range
-        if (!empty($filters['date_from'])) {
-            $where[] = $wpdb->prepare("comment_date >= %s", $filters['date_from'] . ' 00:00:00');
-        }
-        if (!empty($filters['date_to'])) {
-            $where[] = $wpdb->prepare("comment_date <= %s", $filters['date_to'] . ' 23:59:59');
-        }
-        
-        // Author filter
-        if (isset($filters['author']) && !empty($filters['author']) && $filters['author'] !== 'all') {
-            $author_email = sanitize_email($filters['author']);
-            if (is_email($author_email)) {
-                $where[] = $wpdb->prepare("comment_author_email = %s", $author_email);
-            }
-        }
-        
-        // Post type filter
-        $comments = array();
-        if (isset($filters['post_type']) && is_array($filters['post_type']) && !in_array('all', $filters['post_type'])) {
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed for post type filtering, caching not practical
-            $post_ids = $wpdb->get_col($wpdb->prepare(
-                "SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($filters['post_type']), '%s')) . ")",
-                ...$filters['post_type']
+
+        $where = $this->build_where($filters);
+
+        nocache_headers();
+        header('Content-Type: text/csv; charset=utf-8');
+        header('Content-Disposition: attachment; filename="comments-export-' . gmdate('Y-m-d') . '.csv"');
+
+        $output = fopen('php://output', 'w');
+        fputcsv($output, array('ID', 'Post ID', 'Author', 'Email', 'URL', 'Content', 'Date', 'Status'), ',', '"', '');
+
+        // Stream in chunks so large exports don't exhaust memory.
+        $last_id = 0;
+        while (false !== $where) {
+            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in build_where()
+            $comments = $wpdb->get_results($wpdb->prepare("SELECT comment_ID, comment_post_ID, comment_author, comment_author_email, comment_author_url, comment_content, comment_date, comment_approved FROM $wpdb->comments WHERE $where AND comment_ID > %d ORDER BY comment_ID LIMIT %d", $last_id, self::BATCH_SIZE));
+            if (empty($comments)) {
+                break;
+            }
+            foreach ($comments as $comment) {
+                fputcsv($output, array_map(array($this, 'csv_safe'), array_values((array) $comment)), ',', '"', '');
+                $last_id = $comment->comment_ID;
+            }
+        }
+
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose -- php://output is a special stream, not a file
+        fclose($output);
+        exit;
+    }
+
+    /**
+     * Prefix cells that a spreadsheet would run as a formula (CSV injection).
+     */
+    private function csv_safe($value) {
+        return preg_match('/^[=+\-@\t\r]/', (string) $value) ? "'" . $value : $value;
+    }
+
+    // ---------------------------------------------------------------------
+    // Smart rules
+    // ---------------------------------------------------------------------
+
+    private function get_rules() {
+        $rules = get_option('ulticocl_rules', array());
+        if (!is_array($rules)) {
+            return array();
+        }
+        foreach ($rules as $id => $rule) {
+            $rules[$id] = wp_parse_args($rule, ULTICOCL_Matcher::defaults());
+        }
+        return $rules;
+    }
+
+    /**
+     * Add to a per-rule counter ('hits' = comments caught, 'restored' = caught by mistake).
+     */
+    private function add_hits($rule_id, $n, $field = 'hits') {
+        if ($n < 1 || '' === $rule_id) {
+            return;
+        }
+        $state = get_option('ulticocl_rule_state', array());
+        $current = isset($state[$rule_id]) ? $state[$rule_id] : array();
+        $state[$rule_id] = array_merge(array('hits' => 0, 'cursor' => 0, 'last_run' => 0), $current);
+        $state[$rule_id][$field] = (isset($state[$rule_id][$field]) ? (int) $state[$rule_id][$field] : 0) + (int) $n;
+        update_option('ulticocl_rule_state', $state, false);
+    }
+
+    /**
+     * Daily counters behind the dashboard charts, kept for 120 days.
+     *
+     * @param string $type    'new' (caught on arrival), 'scan' (caught among existing comments) or 'restored'.
+     * @param int    $n       How many.
+     * @param string $rule_id Rule responsible, if any.
+     */
+    private function record_stat($type, $n, $rule_id = '') {
+        if ($n < 1) {
+            return;
+        }
+        $stats = get_option('ulticocl_stats', array());
+        $stats = is_array($stats) ? $stats : array();
+        $day = current_time('Y-m-d');
+        $row = isset($stats['days'][$day]) ? $stats['days'][$day] : array();
+        $row[$type] = (isset($row[$type]) ? (int) $row[$type] : 0) + (int) $n;
+        if ('' !== $rule_id && 'restored' !== $type) {
+            $row['r'][$rule_id] = (isset($row['r'][$rule_id]) ? (int) $row['r'][$rule_id] : 0) + (int) $n;
+        }
+        $stats['days'][$day] = $row;
+        if (count($stats['days']) > 120) {
+            ksort($stats['days']);
+            $stats['days'] = array_slice($stats['days'], -120, null, true);
+        }
+        update_option('ulticocl_stats', $stats, false);
+    }
+
+    /**
+     * WHERE fragment limiting a rule scan to the comments it may touch: managed types,
+     * the chosen statuses (never trash or quarantine) and the minimum age.
+     */
+    private function rule_scope_where($rule) {
+        global $wpdb;
+
+        $statuses = array();
+        foreach ((array) $rule['status'] as $status) {
+            if (in_array($status, ULTICOCL_Matcher::RULE_STATUSES, true)) {
+                $statuses[] = self::STATUS_MAP[$status];
+            }
+        }
+        if (!$statuses) {
+            $statuses = array('1', '0', 'spam');
+        }
+        $where = $this->types_sql() . ' AND ' . $wpdb->prepare('comment_approved IN (' . implode(',', array_fill(0, count($statuses), '%s')) . ')', $statuses);
+        if (!empty($rule['older_than'])) {
+            $where .= $wpdb->prepare(' AND comment_date_gmt < %s', gmdate('Y-m-d H:i:s', time() - absint($rule['older_than']) * DAY_IN_SECONDS));
+        }
+        // Comments restored from quarantine are marked as fine and never caught again.
+        $where .= " AND NOT EXISTS (SELECT 1 FROM $wpdb->commentmeta ok WHERE ok.comment_id = $wpdb->comments.comment_ID AND ok.meta_key = '_ulticocl_ok')";
+        return $where;
+    }
+
+    private function count_scope($rule) {
+        global $wpdb;
+        $where = $this->rule_scope_where($rule);
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in rule_scope_where()
+        return (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE $where");
+    }
+
+    /**
+     * Check one chunk of existing comments against a rule and, unless $dry, apply its action.
+     *
+     * ponytail: comments are matched in PHP (regex, Unicode scripts) in chunks of BATCH_SIZE by ID.
+     * A full pass over ~100k comments takes a few cron runs; add a SQL pre-filter if that is too slow.
+     *
+     * @return array|WP_Error scanned, matched, acted, cursor, done, samples, ids
+     */
+    private function scan_rule($rule, $cursor, $limit, $dry, $rule_id = '') {
+        global $wpdb;
+
+        $rule = wp_parse_args($rule, ULTICOCL_Matcher::defaults());
+        if (!ULTICOCL_Matcher::scope_is_safe($rule)) {
+            return new WP_Error('unsafe', __('This rule has no checks and no minimum age, so it was skipped to protect your comments. Edit the rule to continue.', 'ultimate-comment-cleaner'));
+        }
+
+        $where = $this->rule_scope_where($rule);
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in rule_scope_where()
+        $rows = $wpdb->get_results($wpdb->prepare("SELECT comment_ID, comment_post_ID, comment_author, comment_author_email, comment_author_url, comment_content, comment_approved, user_id FROM $wpdb->comments WHERE comment_ID > %d AND $where ORDER BY comment_ID LIMIT %d", $cursor, $limit));
+
+        $result = array('scanned' => count($rows), 'matched' => 0, 'acted' => 0, 'cursor' => $cursor, 'done' => count($rows) < $limit, 'samples' => array(), 'ids' => array());
+
+        if (!$dry) {
+            wp_defer_comment_counting(true);
+        }
+        foreach ($rows as $row) {
+            $result['cursor'] = (int) $row->comment_ID;
+            if ($this->is_protected($row)) {
+                continue;
+            }
+            $reason = ULTICOCL_Matcher::evaluate($rule, $row);
+            if (false === $reason) {
+                continue;
+            }
+            if ('' === $reason) {
+                $reason = __('Matched the age and status of the rule', 'ultimate-comment-cleaner');
+            }
+            $result['matched']++;
+            if (count($result['samples']) < 5) {
+                $result['samples'][] = array(
+                    'author'  => $row->comment_author,
+                    'excerpt' => wp_trim_words(wp_strip_all_tags($row->comment_content), 18),
+                    'reason'  => $reason,
+                );
+            }
+            if ($dry) {
+                $result['ids'][] = (int) $row->comment_ID;
+            } elseif ($this->apply_rule_action($row, $rule, $reason, null, $rule_id)) {
+                $result['acted']++;
+            }
+        }
+        if (!$dry) {
+            wp_defer_comment_counting(false);
+        }
+
+        return $result;
+    }
+
+    private function apply_rule_action($comment, $rule, $reason, $previous_status = null, $rule_id = '') {
+        switch ($rule['action']) {
+            case 'delete':
+                return (bool) wp_delete_comment((int) $comment->comment_ID, true);
+            case 'spam':
+                return 'spam' === (string) $comment->comment_approved ? false : (bool) wp_spam_comment((int) $comment->comment_ID);
+            default:
+                return $this->quarantine($comment, $rule['name'], $reason, $previous_status, $rule_id);
+        }
+    }
+
+    /**
+     * Commenters rules must never touch: moderators and the allowlist from Settings.
+     *
+     * @param object|array $comment Comment row or comment data.
+     */
+    private function is_protected($comment) {
+        static $moderators = array();
+        $c = (array) $comment;
+
+        $user_id = isset($c['user_id']) ? (int) $c['user_id'] : 0;
+        if ($user_id) {
+            if (!isset($moderators[$user_id])) {
+                $moderators[$user_id] = user_can($user_id, 'moderate_comments');
+            }
+            if ($moderators[$user_id]) {
+                return true;
+            }
+        }
+
+        $email = isset($c['comment_author_email']) ? strtolower(trim($c['comment_author_email'])) : '';
+        if ('' === $email) {
+            return false;
+        }
+        foreach (preg_split('/\r\n|\r|\n/', strtolower($this->get_settings()['allowlist']), -1, PREG_SPLIT_NO_EMPTY) as $entry) {
+            $entry = trim($entry);
+            if ('' === $entry) {
+                continue;
+            }
+            if ($entry === $email || ('@' === $entry[0] && substr($email, -strlen($entry)) === $entry)) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    // ---------------------------------------------------------------------
+    // New comments
+    // ---------------------------------------------------------------------
+
+    /**
+     * Filter on pre_comment_approved: hold back a new comment that a rule flags.
+     * It is saved as spam first, which keeps notification emails quiet, then
+     * after_new_comment() applies the rule's real action.
+     */
+    public function screen_new_comment($approved, $commentdata) {
+        $this->pending = null;
+
+        if (is_wp_error($approved) || 'spam' === $approved || !is_array($commentdata)) {
+            return $approved;
+        }
+        $type = isset($commentdata['comment_type']) ? $commentdata['comment_type'] : '';
+        if ('' !== $type && !in_array($type, self::TYPES, true)) {
+            return $approved;
+        }
+        if ($this->is_protected($commentdata)) {
+            return $approved;
+        }
+
+        foreach ($this->get_rules() as $id => $rule) {
+            if (empty($rule['active']) || 'existing' === $rule['scope'] || !ULTICOCL_Matcher::has_signals($rule)) {
+                continue;
+            }
+            $reason = ULTICOCL_Matcher::evaluate($rule, $commentdata);
+            if (false !== $reason) {
+                $this->pending = array($id, $rule, $reason);
+                return 'spam';
+            }
+        }
+        return $approved;
+    }
+
+    /**
+     * Action comment_post: finish handling a comment that screen_new_comment() flagged.
+     */
+    public function after_new_comment($comment_id) {
+        if (null === $this->pending) {
+            return;
+        }
+        list($id, $rule, $reason) = $this->pending;
+        $this->pending = null;
+
+        $comment = get_comment((int) $comment_id);
+        if (!$comment) {
+            return;
+        }
+        // Deleting now would pull the comment out from under core and other plugins that are
+        // still handling it. It is already saved as spam, so it stays hidden until shutdown.
+        if ('delete' === $rule['action']) {
+            if (!$this->deferred_deletes) {
+                add_action('shutdown', array($this, 'delete_deferred_comments'));
+            }
+            $this->deferred_deletes[] = (int) $comment_id;
+            $this->add_hits($id, 1);
+            $this->record_stat('new', 1, $id);
+            return;
+        }
+        // A new comment would have waited for moderation, so that is where a restore puts it back.
+        if ($this->apply_rule_action($comment, $rule, $reason, '0', $id) || 'spam' === $rule['action']) {
+            $this->add_hits($id, 1);
+            $this->record_stat('new', 1, $id);
+        }
+    }
+
+    // ---------------------------------------------------------------------
+    // Quarantine
+    // ---------------------------------------------------------------------
+
+    /**
+     * Action shutdown: delete new comments that a "delete" rule flagged.
+     */
+    public function delete_deferred_comments() {
+        foreach ($this->deferred_deletes as $comment_id) {
+            wp_delete_comment($comment_id, true);
+        }
+        $this->deferred_deletes = array();
+    }
+
+    private function status_name($status) {
+        $names = array('1' => 'approved', '0' => 'unapproved');
+        return isset($names[$status]) ? $names[$status] : $status;
+    }
+
+    /**
+     * Change comment_approved to any value, including our own quarantine status that
+     * the core status functions refuse. Fires the usual transition hooks.
+     */
+    private function set_status($comment, $new) {
+        global $wpdb;
+
+        $comment = get_comment($comment);
+        if (!$comment) {
+            return false;
+        }
+        $old = (string) $comment->comment_approved;
+        if ($old === $new) {
+            return true;
+        }
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Core cannot set a custom comment status.
+        if (false === $wpdb->update($wpdb->comments, array('comment_approved' => $new), array('comment_ID' => (int) $comment->comment_ID))) {
+            return false;
+        }
+        clean_comment_cache((int) $comment->comment_ID);
+        wp_update_comment_count((int) $comment->comment_post_ID);
+        wp_transition_comment_status($this->status_name($new), $this->status_name($old), get_comment((int) $comment->comment_ID));
+        return true;
+    }
+
+    /**
+     * Hide a comment in quarantine, remembering why and what it was before.
+     */
+    private function quarantine($comment, $source, $reason, $previous_status = null, $rule_id = '') {
+        $comment = get_comment($comment);
+        if (!$comment || self::QUARANTINE === (string) $comment->comment_approved) {
+            return false;
+        }
+        $previous = null === $previous_status ? (string) $comment->comment_approved : $previous_status;
+        if (!$this->set_status($comment, self::QUARANTINE)) {
+            return false;
+        }
+        update_comment_meta((int) $comment->comment_ID, '_ulticocl_q_time', time());
+        update_comment_meta((int) $comment->comment_ID, '_ulticocl_q', array('prev' => $previous, 'source' => $source, 'reason' => $reason, 'rule' => $rule_id));
+        return true;
+    }
+
+    private function restore($comment) {
+        $comment = get_comment($comment);
+        if (!$comment || self::QUARANTINE !== (string) $comment->comment_approved) {
+            return false;
+        }
+        $info = get_comment_meta((int) $comment->comment_ID, '_ulticocl_q', true);
+        $previous = is_array($info) && isset($info['prev']) ? (string) $info['prev'] : '0';
+        if (!in_array($previous, array('1', '0', 'spam'), true)) {
+            $previous = '0';
+        }
+        if (!$this->set_status($comment, $previous)) {
+            return false;
+        }
+        $this->clear_quarantine_meta((int) $comment->comment_ID);
+        // The admin just said this one is fine, so scheduled rules must not catch it again.
+        update_comment_meta((int) $comment->comment_ID, '_ulticocl_ok', 1);
+        // A restore means the rule caught a good comment: count it against the rule's accuracy.
+        if (is_array($info) && !empty($info['rule'])) {
+            $this->add_hits($info['rule'], 1, 'restored');
+        }
+        $this->record_stat('restored', 1);
+        return true;
+    }
+
+    private function clear_quarantine_meta($comment_id) {
+        delete_comment_meta($comment_id, '_ulticocl_q');
+        delete_comment_meta($comment_id, '_ulticocl_q_time');
+    }
+
+    /**
+     * Delete quarantined comments older than the retention set in Settings (daily cron).
+     */
+    public function purge_quarantine() {
+        $days = (int) $this->get_settings()['quarantine_days'];
+        if ($days < 1) {
+            return;
+        }
+        $cutoff = time() - $days * DAY_IN_SECONDS;
+        $start = time();
+        $purged = 0;
+        do {
+            $ids = get_comments(array(
+                'status'     => self::QUARANTINE,
+                'fields'     => 'ids',
+                'number'     => self::BATCH_SIZE,
+                'orderby'    => 'comment_ID',
+                // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query -- Small, daily, batched query on the quarantine only.
+                'meta_query' => array(array('key' => '_ulticocl_q_time', 'value' => $cutoff, 'compare' => '<', 'type' => 'NUMERIC')),
             ));
-            if (!empty($post_ids)) {
-                $where[] = "comment_post_ID IN (" . implode(',', array_map('intval', $post_ids)) . ")";
-            } else {
-                // No posts found, so no comments - will export empty array
-            }
-        }
-        
-        // Additional filters
-        if (!empty($filters['has_url'])) {
-            $where[] = "comment_author_url != ''";
-        }
-        if (!empty($filters['no_url'])) {
-            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
-        }
-        
-        // Only query if we have valid where conditions
-        if (!empty($where)) {
-            $where_clause = implode(' AND ', $where);
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-            $comments = $wpdb->get_results("SELECT * FROM $wpdb->comments WHERE $where_clause");
-        }
-        
-        header('Content-Type: text/csv');
-        header('Content-Disposition: attachment; filename="comments-export-' . gmdate('Y-m-d') . '.csv"');
-        
-        $output = fopen('php://output', 'w');
-        fputcsv($output, array('ID', 'Post ID', 'Author', 'Email', 'URL', 'Content', 'Date', 'Status'));
-        
-        foreach ($comments as $comment) {
-            fputcsv($output, array(
-                $comment->comment_ID,
-                $comment->comment_post_ID,
-                $comment->comment_author,
-                $comment->comment_author_email,
-                $comment->comment_author_url,
-                $comment->comment_content,
-                $comment->comment_date,
-                $comment->comment_approved
-            ));
-        }
-        
-        if (is_resource($output)) {
-            // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose -- php://output is a special stream, not a file
-            fclose($output);
-        }
+            wp_defer_comment_counting(true);
+            foreach ($ids as $id) {
+                if (wp_delete_comment((int) $id, true)) {
+                    $purged++;
+                }
+            }
+            wp_defer_comment_counting(false);
+        } while (count($ids) === self::BATCH_SIZE && time() - $start < self::CRON_BUDGET);
+
+        if ($purged > 0) {
+            /* translators: 1: number of comments, 2: number of days */
+            $this->log_activity(sprintf(_n('Deleted %1$d quarantined comment older than %2$d days', 'Deleted %1$d quarantined comments older than %2$d days', $purged, 'ultimate-comment-cleaner'), $purged, $days));
+        }
+    }
+
+    // ---------------------------------------------------------------------
+    // Comment list actions (row links and bulk actions)
+    // ---------------------------------------------------------------------
+
+    /**
+     * Apply one action to one comment. Only managed comment types can be touched.
+     */
+    private function comment_action($id, $action) {
+        $comment = get_comment((int) $id);
+        if (!$comment || !in_array($comment->comment_type, array_merge(self::TYPES, array('')), true)) {
+            return false;
+        }
+        $id = (int) $comment->comment_ID;
+        $quarantined = self::QUARANTINE === (string) $comment->comment_approved;
+
+        switch ($action) {
+            case 'approve':
+                $ok = $quarantined ? $this->set_status($comment, '1') : wp_set_comment_status($id, 'approve');
+                break;
+            case 'unapprove':
+                $ok = $quarantined ? $this->set_status($comment, '0') : wp_set_comment_status($id, 'hold');
+                break;
+            case 'spam':
+                $ok = $quarantined ? $this->set_status($comment, 'spam') : wp_spam_comment($id);
+                break;
+            case 'quarantine':
+                return $this->quarantine($comment, __('Moved manually', 'ultimate-comment-cleaner'), '');
+            case 'restore':
+                return $this->restore($comment);
+            case 'delete':
+                return (bool) wp_delete_comment($id, true);
+            default:
+                return false;
+        }
+        if ($ok && $quarantined) {
+            $this->clear_quarantine_meta($id);
+        }
+        return (bool) $ok;
+    }
+
+    /**
+     * admin_init: handle a row link or a bulk action from the comment lists.
+     */
+    public function handle_comment_actions() {
+        // phpcs:disable WordPress.Security.NonceVerification -- Both paths below call check_admin_referer().
+        if (!isset($_GET['page']) || 'ultimate-comment-cleaner' !== $_GET['page']) {
+            return;
+        }
+
+        $ids = array();
+        $action = '';
+        if (!empty($_GET['ulticocl_do']) && isset($_GET['c'])) {
+            $action = sanitize_key(wp_unslash($_GET['ulticocl_do']));
+            $ids = array(absint($_GET['c']));
+            check_admin_referer('ulticocl_row_' . $action . '_' . $ids[0]);
+        } elseif (isset($_SERVER['REQUEST_METHOD']) && 'POST' === $_SERVER['REQUEST_METHOD'] && isset($_POST['ids']) && is_array($_POST['ids'])) {
+            foreach (array('action', 'action2') as $key) {
+                if (empty($action) && !empty($_POST[$key]) && '-1' !== $_POST[$key]) {
+                    $action = sanitize_key(wp_unslash($_POST[$key]));
+                }
+            }
+            check_admin_referer('bulk-ulticocl_comments');
+            $ids = array_filter(array_map('absint', wp_unslash($_POST['ids'])));
+        } else {
+            return;
+        }
+        // phpcs:enable WordPress.Security.NonceVerification
+
+        if (!current_user_can('manage_options')) {
+            wp_die(esc_html__('You do not have sufficient permissions to perform this action.', 'ultimate-comment-cleaner'));
+        }
+
+        $url = remove_query_arg(array('ulticocl_do', 'c', '_wpnonce', '_wp_http_referer', 'action', 'action2', 'ulticocl_notice', 'ulticocl_n', 'ulticocl_a'), isset($_POST['_wp_http_referer']) ? wp_unslash($_POST['_wp_http_referer']) : (isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : '')); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,WordPress.Security.NonceVerification -- Only used as a redirect target after wp_safe_redirect() validation.
+
+        if (in_array($action, self::COMMENT_ACTIONS, true) && $ids) {
+            $done = 0;
+            wp_defer_comment_counting(true);
+            foreach ($ids as $id) {
+                if ($this->comment_action($id, $action)) {
+                    $done++;
+                }
+            }
+            wp_defer_comment_counting(false);
+            $url = add_query_arg(array('ulticocl_notice' => 1, 'ulticocl_n' => $done, 'ulticocl_a' => $action), $url);
+        }
+
+        wp_safe_redirect($url ? $url : admin_url('tools.php?page=ultimate-comment-cleaner&tab=manage'));
         exit;
     }
-    
-    public function check_triggers() {
-        $triggers = get_option('ulticocl_triggers', array());
-        
-        foreach ($triggers as $id => $trigger) {
-            if (!$trigger['active']) continue;
-            
-            $last_run = isset($trigger['last_run']) ? strtotime($trigger['last_run']) : 0;
-            $schedule_interval = $this->get_schedule_interval($trigger['schedule']);
-            
-            if (time() - $last_run >= $schedule_interval) {
-                $this->execute_trigger($id, $trigger);
-            }
-        }
-    }
-    
-    private function execute_trigger($trigger_id, $trigger) {
-        global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        if ($trigger['status'] === 'approved') {
-            $where[] = "comment_approved = '1'";
-        } elseif ($trigger['status'] === 'pending') {
-            $where[] = "comment_approved = '0'";
-        } elseif ($trigger['status'] === 'spam') {
-            $where[] = "comment_approved = 'spam'";
-        }
-        
-        if (!empty($trigger['older_than'])) {
-            $date = gmdate('Y-m-d H:i:s', strtotime('-' . intval($trigger['older_than']) . ' days'));
-            $where[] = $wpdb->prepare("comment_date < %s", $date);
-        }
-        
-        $where_clause = implode(' AND ', $where);
-        
-        // Get comment IDs before deletion
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-        $comment_ids = $wpdb->get_col("SELECT comment_ID FROM $wpdb->comments WHERE $where_clause");
-        
-        if (empty($comment_ids)) {
+
+    // ---------------------------------------------------------------------
+    // Scheduled runs
+    // ---------------------------------------------------------------------
+
+    /**
+     * Hourly cron: continue or start scans for rules that apply to existing comments.
+     */
+    public function run_scheduled_rules() {
+        $rules = $this->get_rules();
+        $state = get_option('ulticocl_rule_state', array());
+        $start = time();
+
+        foreach ($rules as $id => $rule) {
+            if (empty($rule['active']) || 'new' === $rule['scope'] || !ULTICOCL_Matcher::scope_is_safe($rule)) {
+                continue;
+            }
+            if (time() - $start >= self::CRON_BUDGET) {
+                break;
+            }
+            $st = wp_parse_args(isset($state[$id]) ? $state[$id] : array(), array('hits' => 0, 'cursor' => 0, 'last_run' => 0));
+            // A scan in progress carries on; otherwise wait for the schedule (5 minutes of slack for hourly cron drift).
+            if (0 === (int) $st['cursor'] && time() - (int) $st['last_run'] < $this->get_schedule_interval($rule['schedule']) - 5 * MINUTE_IN_SECONDS) {
+                continue;
+            }
+
+            $acted = 0;
+            do {
+                $result = $this->scan_rule($rule, (int) $st['cursor'], self::BATCH_SIZE, false, $id);
+                if (is_wp_error($result)) {
+                    break;
+                }
+                $st['cursor'] = $result['done'] ? 0 : $result['cursor'];
+                $acted += $result['acted'];
+            } while (!$result['done'] && time() - $start < self::CRON_BUDGET);
+
+            if (!is_wp_error($result) && $result['done']) {
+                $st['last_run'] = time();
+            }
+            $st['hits'] += $acted;
+            $state[$id] = $st;
+            $this->record_stat('scan', $acted, $id);
+
+            if ($acted > 0) {
+                /* translators: 1: rule name, 2: result sentence */
+                $this->log_activity(sprintf(__('Rule "%1$s": %2$s', 'ultimate-comment-cleaner'), $rule['name'], $this->action_message($rule['action'], $acted)));
+                $this->send_email_notification($acted, $rule['name'], $rule['action']);
+            }
+        }
+        update_option('ulticocl_rule_state', $state, false);
+    }
+
+    public function get_settings() {
+        return wp_parse_args(get_option('ulticocl_settings', array()), array(
+            'enable_logging' => 1,
+            'send_email_notifications' => 0,
+            'notification_email' => get_option('admin_email'),
+            'quarantine_days' => 14,
+            'allowlist' => '',
+        ));
+    }
+
+    private function send_email_notification($count, $source = 'manual', $action = 'delete') {
+        $settings = $this->get_settings();
+
+        if (empty($settings['send_email_notifications']) || $count < 1) {
             return;
         }
-        
-        $deleted = 0;
-        // Use WordPress function to properly delete comments
-        foreach ($comment_ids as $comment_id) {
-            if (wp_delete_comment($comment_id, true)) {
-                $deleted++;
-            }
-        }
-        
-        // Update trigger last run
-        $triggers = get_option('ulticocl_triggers', array());
-        $triggers[$trigger_id]['last_run'] = current_time('mysql');
-        update_option('ulticocl_triggers', $triggers);
-        
-        // Clear caches
-        wp_cache_flush();
-        delete_transient('ulticocl_comments_count');
-        
-        // translators: %1$s: trigger name, %2$d: number of comments deleted
-        $this->log_activity(sprintf(__('Trigger "%1$s" deleted %2$d comments', 'ultimate-comment-cleaner'), $trigger['name'], $deleted));
-        $this->send_email_notification($deleted, $trigger['name']);
-    }
-    
-    private function send_email_notification($count, $source = 'manual') {
-        $settings = get_option('ulticocl_settings', array());
-        
-        // Only send if notifications are enabled
-        if (!isset($settings['send_email_notifications']) || !$settings['send_email_notifications']) {
-            return;
-        }
-        
-        // Get notification email address
-        $email = isset($settings['notification_email']) && !empty($settings['notification_email']) 
-            ? $settings['notification_email'] 
-            : get_option('admin_email');
-        
+
+        $email = !empty($settings['notification_email']) ? $settings['notification_email'] : get_option('admin_email');
+
         if (empty($email) || !is_email($email)) {
             return;
         }
-        
-        // Prepare email
+
         // translators: %s: Site name.
-        $subject = sprintf(__('[%s] Comments Deleted', 'ultimate-comment-cleaner'), get_bloginfo('name'));
-        
-        // translators: %d: Number of comments deleted.
-        $message = sprintf(
-            // translators: %d: Number of comments deleted.
-            __('%d comment(s) have been deleted from your website.', 'ultimate-comment-cleaner'),
-            $count
+        $subject = sprintf(__('[%s] Comments Cleaned', 'ultimate-comment-cleaner'), get_bloginfo('name'));
+
+        $sentences = array(
+            /* translators: %d: number of comments */
+            'delete'     => _n('%d comment has been deleted from your website.', '%d comments have been deleted from your website.', $count, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'quarantine' => _n('%d comment has been moved to quarantine on your website.', '%d comments have been moved to quarantine on your website.', $count, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'spam'       => _n('%d comment has been marked as spam on your website.', '%d comments have been marked as spam on your website.', $count, 'ultimate-comment-cleaner'),
         );
-        
+        $message = sprintf(isset($sentences[$action]) ? $sentences[$action] : $sentences['delete'], $count);
+
         if ($source !== 'manual') {
-            // translators: %s: trigger name
-            $message .= "\n\n" . sprintf(__('Source: Auto Trigger "%s"', 'ultimate-comment-cleaner'), $source);
+            // translators: %s: rule name
+            $message .= "\n\n" . sprintf(__('Source: Smart Rule "%s"', 'ultimate-comment-cleaner'), $source);
         } else {
-            $message .= "\n\n" . __('Source: Manual deletion', 'ultimate-comment-cleaner');
-        }
-        
+            $message .= "\n\n" . __('Source: Manual clean-up', 'ultimate-comment-cleaner');
+        }
+
         // translators: %s: current time
         $message .= "\n\n" . sprintf(__('Time: %s', 'ultimate-comment-cleaner'), current_time('mysql'));
         $message .= "\n\n" . __('This is an automated notification from Ultimate Comment Cleaner plugin.', 'ultimate-comment-cleaner');
-        
-        // Send email
+
         wp_mail($email, $subject, $message);
     }
-    
+
     private function get_schedule_interval($schedule) {
         switch ($schedule) {
@@ -1208 +2170 @@
             case 'daily': return DAY_IN_SECONDS;
             case 'weekly': return WEEK_IN_SECONDS;
-            default: return HOUR_IN_SECONDS;
-        }
-    }
-    
+            default: return DAY_IN_SECONDS;
+        }
+    }
+
     private function log_activity($message) {
-        $settings = get_option('ulticocl_settings', array());
-        
-        // Only log if logging is enabled
-        if (isset($settings['enable_logging']) && $settings['enable_logging']) {
+        $settings = $this->get_settings();
+
+        if (!empty($settings['enable_logging'])) {
             $activities = get_option('ulticocl_activity_log', array());
             $activities[] = array(
@@ -1222 +2183 @@
                 'message' => $message
             );
-            update_option('ulticocl_activity_log', array_slice($activities, -100)); // Keep last 100
-        }
-    }
-    
+            update_option('ulticocl_activity_log', array_slice($activities, -100), false); // Keep last 100
+        }
+    }
+
+    /**
+     * Save settings from $_POST. Callers must verify the nonce and capability first.
+     */
+    private function save_settings_from_post() {
+        // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce verified by callers.
+        $notification_email = isset($_POST['notification_email']) ? sanitize_email(wp_unslash($_POST['notification_email'])) : '';
+        $current = $this->get_settings();
+
+        // One email address or @domain per line.
+        $allowlist = array();
+        if (isset($_POST['allowlist'])) {
+            foreach (preg_split('/\r\n|\r|\n/', sanitize_textarea_field(wp_unslash($_POST['allowlist']))) as $line) {
+                $line = strtolower(trim($line));
+                if (is_email($line) || preg_match('/^@?[a-z0-9-]+(\.[a-z0-9-]+)+$/', $line)) {
+                    $allowlist[] = $line;
+                }
+            }
+        }
+
+        $settings = array(
+            'enable_logging' => empty($_POST['enable_logging']) ? 0 : 1,
+            'send_email_notifications' => empty($_POST['send_email_notifications']) ? 0 : 1,
+            'notification_email' => $notification_email ? $notification_email : get_option('admin_email'),
+            'quarantine_days' => isset($_POST['quarantine_days']) ? min(365, absint($_POST['quarantine_days'])) : (int) $current['quarantine_days'],
+            'allowlist' => isset($_POST['allowlist']) ? implode("\n", array_unique($allowlist)) : $current['allowlist'],
+        );
+        // phpcs:enable WordPress.Security.NonceVerification.Missing
+
+        update_option('ulticocl_settings', $settings);
+        $this->log_activity(__('Settings updated', 'ultimate-comment-cleaner'));
+    }
+
     public function handle_settings_save() {
         if (!isset($_POST['ulticocl_action']) || sanitize_text_field(wp_unslash($_POST['ulticocl_action'])) !== 'save_settings') {
             return;
         }
-        
+
         if (!current_user_can('manage_options')) {
             wp_die(esc_html__('You do not have sufficient permissions to perform this action.', 'ultimate-comment-cleaner'));
         }
-        
+
         if (!isset($_POST['ulticocl_settings_nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['ulticocl_settings_nonce'])), 'ulticocl_save_settings')) {
             wp_die(esc_html__('Security check failed.', 'ultimate-comment-cleaner'));
         }
-        
-        $notification_email = isset($_POST['notification_email']) ? sanitize_email(wp_unslash($_POST['notification_email'])) : '';
-        if (empty($notification_email)) {
-            $notification_email = get_option('admin_email');
-        }
-        
-        $settings = array(
-            'enable_logging' => isset($_POST['enable_logging']) ? 1 : 0,
-            'send_email_notifications' => isset($_POST['send_email_notifications']) ? 1 : 0,
-            'notification_email' => $notification_email
-        );
-        
-        update_option('ulticocl_settings', $settings);
-        
-        // Log settings update if logging is enabled (check before update)
-        $old_settings = get_option('rc_settings', array());
-        if (isset($old_settings['enable_logging']) && $old_settings['enable_logging']) {
-            $this->log_activity(__('Settings updated', 'ultimate-comment-cleaner'));
-        }
-        
-        // Redirect back to settings tab with success message
+
+        $this->save_settings_from_post();
+
         wp_safe_redirect(add_query_arg(array(
             'page' => 'ultimate-comment-cleaner',
@@ -1266 +2241 @@
         exit;
     }
-    
+
     public function ajax_save_settings() {
         check_ajax_referer('ulticocl_nonce', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
             wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
         }
-        
-        $notification_email = isset($_POST['notification_email']) ? sanitize_email(wp_unslash($_POST['notification_email'])) : '';
-        if (empty($notification_email)) {
-            $notification_email = get_option('admin_email');
-        }
-        
-        $settings = array(
-            'enable_logging' => isset($_POST['enable_logging']) ? 1 : 0,
-            'send_email_notifications' => isset($_POST['send_email_notifications']) ? 1 : 0,
-            'notification_email' => $notification_email
-        );
-        
-        update_option('ulticocl_settings', $settings);
-        
-        // Log settings update if logging is enabled (check after update)
-        if ($settings['enable_logging']) {
-            $this->log_activity(__('Settings updated', 'ultimate-comment-cleaner'));
-        }
-        
+
+        $this->save_settings_from_post();
+
         wp_send_json_success(array('message' => __('Settings saved successfully.', 'ultimate-comment-cleaner')));
     }
-    
+
+    /**
+     * Upgrade data from earlier versions (runs once). Version 1.0 "Auto Triggers" become
+     * Smart Rules that delete exactly as before. A trigger that could have deleted every
+     * approved or pending comment is imported switched off.
+     */
+    public function maybe_upgrade() {
+        if (version_compare((string) get_option('ulticocl_db_version', '0'), '1.1.0', '>=')) {
+            return;
+        }
+
+        $triggers = get_option('ulticocl_triggers', array());
+        if (is_array($triggers) && $triggers && !get_option('ulticocl_rules')) {
+            $rules = array();
+            $state = array();
+            $disabled = 0;
+            foreach ($triggers as $old_id => $trigger) {
+                $status = isset($trigger['status']) && in_array($trigger['status'], ULTICOCL_Matcher::RULE_STATUSES, true) ? $trigger['status'] : 'approved';
+                $schedule = isset($trigger['schedule']) && in_array($trigger['schedule'], self::SCHEDULES, true) ? $trigger['schedule'] : 'daily';
+                $rule = array_merge(ULTICOCL_Matcher::defaults(), array(
+                    'name'       => !empty($trigger['name']) ? sanitize_text_field($trigger['name']) : __('Imported trigger', 'ultimate-comment-cleaner'),
+                    'active'     => !empty($trigger['active']),
+                    'scope'      => 'existing',
+                    'action'     => 'delete',
+                    'status'     => array($status),
+                    'older_than' => isset($trigger['older_than']) ? absint($trigger['older_than']) : 0,
+                    'schedule'   => $schedule,
+                    'created'    => !empty($trigger['created']) ? $trigger['created'] : current_time('mysql'),
+                ));
+                if ($rule['active'] && !ULTICOCL_Matcher::scope_is_safe($rule)) {
+                    $rule['active'] = false;
+                    $disabled++;
+                }
+                $id = '' === (string) $old_id ? uniqid('rule_') : sanitize_key($old_id);
+                $rules[$id] = $rule;
+                $state[$id] = array('hits' => 0, 'cursor' => 0, 'last_run' => !empty($trigger['last_run']) ? (int) get_gmt_from_date($trigger['last_run'], 'U') : 0);
+            }
+            update_option('ulticocl_rules', $rules, false);
+            update_option('ulticocl_rule_state', $state, false);
+            /* translators: %d: number of rules */
+            $this->log_activity(sprintf(_n('Imported %d Auto Trigger as a Smart Rule', 'Imported %d Auto Triggers as Smart Rules', count($rules), 'ultimate-comment-cleaner'), count($rules)));
+            if ($disabled) {
+                /* translators: %d: number of rules */
+                $this->log_activity(sprintf(_n('%d imported rule was switched off because it had no age limit. Review it in Smart Rules.', '%d imported rules were switched off because they had no age limit. Review them in Smart Rules.', $disabled, 'ultimate-comment-cleaner'), $disabled));
+            }
+        }
+        delete_option('ulticocl_triggers');
+        wp_clear_scheduled_hook('ulticocl_check_triggers');
+        update_option('ulticocl_db_version', '1.1.0');
+    }
+
     /**
      * Add settings link to plugin action links
      */
     public function add_plugin_action_links($links) {
-        $settings_link = '<a href="' . admin_url('tools.php?page=ultimate-comment-cleaner') . '">' . esc_html__('Settings', 'ultimate-comment-cleaner') . '</a>';
+        $settings_link = '<a href="' . esc_url(admin_url('tools.php?page=ultimate-comment-cleaner')) . '">' . esc_html__('Settings', 'ultimate-comment-cleaner') . '</a>';
         array_unshift($links, $settings_link);
         return $links;
@@ -1311 +2320 @@
 add_action('plugins_loaded', 'ulticocl_init');
 
+// Stop the scheduled jobs when the plugin is deactivated.
+register_deactivation_hook(__FILE__, function () {
+    wp_clear_scheduled_hook('ulticocl_run_rules');
+    wp_clear_scheduled_hook('ulticocl_purge_quarantine');
+});

ultimate-comment-cleaner/trunk/assets/css/admin.css

@@ -1043 +1043 @@
 }
 
+/* ------------------------------------------------------------------ */
+/* Smart Rules, Quarantine and Manage Comments                         */
+/* ------------------------------------------------------------------ */
+
+.ulticocl-count {
+    display: inline-block;
+    min-width: 18px;
+    padding: 0 6px;
+    margin-left: 6px;
+    border-radius: 9px;
+    background: var(--remove-comments-warning);
+    color: #fff;
+    font-size: 11px;
+    line-height: 18px;
+    text-align: center;
+}
+
+.ulticocl-badge {
+    display: inline-block;
+    padding: 2px 8px;
+    border-radius: 3px;
+    background: var(--remove-comments-gray-200);
+    color: var(--remove-comments-gray-700);
+    font-size: 11px;
+    font-weight: 600;
+    line-height: 1.6;
+    text-transform: uppercase;
+    letter-spacing: 0.02em;
+}
+
+.ulticocl-badge-approved { background: #d1fae5; color: #065f46; }
+.ulticocl-badge-pending { background: #fef3c7; color: #92400e; }
+.ulticocl-badge-spam { background: #fee2e2; color: #991b1b; }
+.ulticocl-badge-quarantine,
+.ulticocl-badge-action-quarantine { background: #fef3c7; color: #92400e; }
+.ulticocl-badge-action-spam { background: #fee2e2; color: #991b1b; }
+.ulticocl-badge-action-delete { background: #1f2937; color: #fff; }
+
+.ulticocl-chip {
+    display: inline-block;
+    margin-left: 4px;
+    padding: 0 6px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: 10px;
+    background: var(--remove-comments-gray-50);
+    color: var(--remove-comments-gray-600);
+    font-size: 11px;
+    line-height: 18px;
+}
+
+.ulticocl-callout {
+    margin: 0 0 24px;
+    padding: 20px 24px;
+    border-left: 4px solid var(--remove-comments-primary);
+    border-radius: 4px;
+    background: var(--remove-comments-gray-50);
+}
+
+.ulticocl-callout h2 { margin-top: 0; }
+
+/* Quick-start presets: one line that glides left and right with the pointer. */
+.ulticocl-presets {
+    display: flex;
+    align-items: center;
+    gap: 14px;
+    min-width: 0;
+    margin-bottom: 16px;
+}
+
+.ulticocl-presets-title {
+    flex: none;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+}
+
+.ulticocl-presets-viewport {
+    flex: 1;
+    min-width: 0;
+    padding: 5px 6px;
+    overflow-x: auto;
+    overflow-y: hidden;
+    scrollbar-width: none;
+    -ms-overflow-style: none;
+}
+
+.ulticocl-presets-viewport::-webkit-scrollbar { display: none; }
+
+/* Fade the edge that has more buttons behind it. */
+.ulticocl-presets-viewport.has-right {
+    -webkit-mask-image: linear-gradient(to right, #000 calc(100% - 40px), transparent);
+    mask-image: linear-gradient(to right, #000 calc(100% - 40px), transparent);
+}
+
+.ulticocl-presets-viewport.has-left {
+    -webkit-mask-image: linear-gradient(to left, #000 calc(100% - 40px), transparent);
+    mask-image: linear-gradient(to left, #000 calc(100% - 40px), transparent);
+}
+
+.ulticocl-presets-viewport.has-left.has-right {
+    -webkit-mask-image: linear-gradient(to right, transparent, #000 40px, #000 calc(100% - 40px), transparent);
+    mask-image: linear-gradient(to right, transparent, #000 40px, #000 calc(100% - 40px), transparent);
+}
+
+.ulticocl-presets-track {
+    display: flex;
+    flex-wrap: nowrap;
+    gap: 8px;
+    width: max-content;
+}
+
+.ulticocl-preset {
+    display: inline-flex;
+    flex: none;
+    align-items: center;
+    gap: 8px;
+    height: 38px;
+    margin: 0;
+    padding: 0 14px 0 8px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: 4px;
+    background: #fff;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    box-shadow: 0 1px 2px rgba(17, 24, 39, 0.05);
+    transition: border-color 0.15s ease, background-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease, transform 0.15s ease;
+}
+
+.ulticocl-preset .dashicons {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    width: 24px;
+    height: 24px;
+    border-radius: 4px;
+    background: #eef2ff;
+    color: var(--remove-comments-primary);
+    font-size: 15px;
+    line-height: 1;
+    transition: background-color 0.15s ease, color 0.15s ease;
+}
+
+.ulticocl-preset:hover,
+.ulticocl-preset:focus-visible {
+    border-color: var(--remove-comments-primary);
+    background: #f7f7ff;
+    color: var(--remove-comments-primary-dark);
+    box-shadow: 0 0 0 3px rgba(99, 102, 241, 0.12);
+    outline: none;
+}
+
+.ulticocl-preset:hover .dashicons,
+.ulticocl-preset:focus-visible .dashicons {
+    background: var(--remove-comments-primary);
+    color: #fff;
+}
+
+.ulticocl-preset:active { transform: translateY(1px); }
+
+@media (max-width: 600px) {
+    .ulticocl-presets { flex-direction: column; align-items: flex-start; gap: 6px; }
+    .ulticocl-presets-viewport { width: 100%; }
+}
+
+.ulticocl-scan-result {
+    margin: 16px 0;
+    padding: 16px 20px;
+    border: 1px solid var(--remove-comments-gray-200);
+    border-left: 4px solid var(--remove-comments-info);
+    border-radius: 4px;
+    background: #fff;
+}
+
+.ulticocl-scan-result p:first-child { margin-top: 0; }
+.ulticocl-error { color: var(--remove-comments-danger); font-weight: 600; }
+.ulticocl-samples { margin: 8px 0 12px 18px; list-style: disc; }
+
+.ulticocl-progress {
+    height: 8px;
+    border-radius: 4px;
+    background: var(--remove-comments-gray-200);
+    overflow: hidden;
+}
+
+.ulticocl-progress > div {
+    height: 100%;
+    background: var(--remove-comments-primary);
+    transition: width 0.2s ease;
+}
+
+.ulticocl-progress-box {
+    position: fixed;
+    top: 50%;
+    left: 50%;
+    transform: translate(-50%, -50%);
+    z-index: 100001;
+    padding: 20px;
+    border: 2px solid var(--remove-comments-primary);
+    border-radius: 4px;
+    background: #fff;
+    box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);
+}
+
+.remove-comments-modal-content.ulticocl-wide { max-width: 760px; }
+
+.ulticocl-fieldset {
+    margin: 0 0 20px;
+    padding: 12px 16px 4px;
+    border: 1px solid var(--remove-comments-gray-200);
+    border-radius: 4px;
+}
+
+.ulticocl-fieldset legend {
+    padding: 0 6px;
+    font-weight: 600;
+    color: var(--remove-comments-gray-700);
+}
+
+.ulticocl-grid-2,
+.ulticocl-grid-3 {
+    display: grid;
+    gap: 0 16px;
+}
+
+.ulticocl-grid-2 { grid-template-columns: 1fr 1fr; }
+.ulticocl-grid-3 { grid-template-columns: 1fr 1fr 1fr; }
+
+.remove-comments-modal-content textarea,
+.remove-comments-modal-content input[type="text"],
+.remove-comments-modal-content input[type="number"] {
+    width: 100%;
+    box-sizing: border-box;
+}
+
+.remove-comments-modal-content input.small-text { width: 70px; }
+.remove-comments-form-group input[type="number"].small-text { width: 90px; }
+
+.ulticocl-inline-checks {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 6px 16px;
+    margin-top: 8px;
+}
+
+.ulticocl-inline-checks > span {
+    color: var(--remove-comments-gray-600);
+    font-size: 13px;
+    font-weight: 600;
+}
+
+/* Small on/off switches in the brand colour (a real checkbox underneath). */
+.ulticocl-toggle {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    margin: 0;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 400;
+    line-height: 1.2;
+    cursor: pointer;
+    user-select: none;
+}
+
+.remove-comments-toggle-switch.ulticocl-mini { width: 32px; height: 18px; }
+.ulticocl-mini .remove-comments-toggle-slider { border-radius: 18px; }
+
+.ulticocl-mini .remove-comments-toggle-slider:before {
+    width: 12px;
+    height: 12px;
+    left: 3px;
+    bottom: 3px;
+    box-shadow: 0 1px 2px rgba(0, 0, 0, 0.25);
+}
+
+.ulticocl-mini input:checked + .remove-comments-toggle-slider:before { transform: translateX(14px); }
+.ulticocl-toggle:hover .remove-comments-toggle-slider { background-color: var(--remove-comments-gray-400); }
+.ulticocl-toggle:hover input:checked + .remove-comments-toggle-slider { background-color: var(--remove-comments-primary-dark); }
+
+/* A switch that sits in a row of fields lines up with the inputs beside it. */
+.ulticocl-field-toggle { display: flex; align-items: flex-end; }
+.ulticocl-field-toggle .ulticocl-toggle { height: var(--ulticocl-field, 40px); }
+/* Six tabs do not fit a phone: let the bar scroll sideways instead of overflowing the page. */
+@media (max-width: 782px) {
+    .remove-comments-tabs {
+        overflow-x: auto;
+        overflow-y: hidden;
+        scrollbar-width: thin;
+    }
+
+    .remove-comments-tab {
+        flex: none;
+        white-space: nowrap;
+    }
+}
+
+.ulticocl-filters {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 8px 14px;
+    margin-bottom: 12px;
+}
+
+.ulticocl-filters input[type="search"] { min-width: 280px; }
+.ulticocl-filters label { display: inline-flex; align-items: center; gap: 4px; }
+
+.remove-comments-comments-panel .subsubsub { float: none; margin: 0 0 8px; }
+.remove-comments-comments-panel .wp-list-table .column-cb { width: 2.2em; }
+.remove-comments-comments-panel .wp-list-table .column-author { width: 18%; }
+.remove-comments-comments-panel .wp-list-table .column-date { width: 130px; }
+
+@media (max-width: 768px) {
+    .ulticocl-grid-2,
+    .ulticocl-grid-3 { grid-template-columns: 1fr; }
+    .ulticocl-filters input[type="search"] { min-width: 0; width: 100%; }
+}
+
+/* One field height. WordPress gives selects extra height (53px next to 40px inputs), so every
+   input and select in the plugin shares one box and rows line up. */
+.remove-comments-wrap { --ulticocl-field: 40px; }
+
+.remove-comments-wrap .remove-comments-select,
+.remove-comments-wrap .remove-comments-form-group select,
+.remove-comments-wrap .remove-comments-form-group input[type="text"],
+.remove-comments-wrap .remove-comments-form-group input[type="email"],
+.remove-comments-wrap .remove-comments-form-group input[type="number"]:not(.small-text),
+.remove-comments-wrap input.remove-comments-form-input {
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    min-height: 0;
+    margin: 0;
+    padding-top: 0;
+    padding-bottom: 0;
+    line-height: 1.3;
+}
+
+/* The inline percentage field sits inside a sentence, so it stays compact. */
+.remove-comments-wrap .remove-comments-form-group input[type="number"].small-text {
+    box-sizing: border-box;
+    width: 80px;
+    height: 34px;
+    padding: 0 10px;
+}
+
+/* ===================================================================== */
+/* Design pass: one set of tokens for every panel, matching the dashboard */
+/* Controls use a 4px radius, surfaces (cards, tables, dialogs) 12px.     */
+/* Spacing follows a 4/8px rhythm.                                        */
+/* ===================================================================== */
+
+.remove-comments-wrap {
+    --ulticocl-field: 40px;
+    --uc-radius: 4px;
+    --uc-radius-lg: 12px;
+    --uc-line: #e5e7eb;
+    --uc-line-soft: #f3f4f6;
+    --uc-ink: #1f2937;
+    --uc-ink-2: #4b5563;
+    --uc-muted: #6b7280;
+    --uc-shadow: 0 1px 2px rgba(17, 24, 39, 0.04);
+    --uc-shadow-lg: 0 16px 40px rgba(17, 24, 39, 0.18);
+    --uc-focus: 0 0 0 3px rgba(99, 102, 241, 0.2);
+}
+
+/* ---- Panel header ------------------------------------------------------- */
+
+.remove-comments-panel-header {
+    margin-bottom: 24px;
+    padding-bottom: 16px;
+    border-bottom: 1px solid var(--uc-line);
+}
+
+.remove-comments-panel-header h2 {
+    margin: 0 0 4px;
+    padding: 0;
+    color: var(--uc-ink);
+    font-size: 20px;
+    font-weight: 700;
+    letter-spacing: -0.01em;
+    line-height: 1.3;
+}
+
+.remove-comments-panel-header p {
+    max-width: 72ch;
+    margin: 0;
+    color: var(--uc-muted);
+    font-size: 13px;
+    line-height: 1.55;
+}
+
+.ulticocl-panel-head {
+    display: flex;
+    align-items: flex-start;
+    justify-content: space-between;
+    gap: 24px;
+}
+
+.ulticocl-panel-head-text { min-width: 0; }
+.ulticocl-panel-head-actions { flex: none; }
+
+/* Destructive action: quiet until hovered, then unmistakably red. */
+.ulticocl-danger-btn {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 16px;
+    border: 1px solid #fca5a5;
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: #b91c1c;
+    font-size: 13px;
+    font-weight: 600;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    transition: background-color 0.15s ease, border-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-danger-btn .dashicons { width: 16px; height: 16px; font-size: 16px; }
+
+.ulticocl-danger-btn:hover {
+    border-color: var(--remove-comments-danger);
+    background: var(--remove-comments-danger);
+    color: #fff;
+}
+
+.ulticocl-danger-btn:focus-visible {
+    outline: none;
+    box-shadow: 0 0 0 3px rgba(239, 68, 68, 0.25);
+}
+
+@media (max-width: 782px) {
+    .ulticocl-panel-head { flex-direction: column; gap: 16px; }
+}
+
+/* ---- Buttons ------------------------------------------------------------ */
+
+.remove-comments-wrap .button,
+.remove-comments-wrap .button-secondary {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 6px;
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    min-height: 0;
+    margin: 0;
+    padding: 0 16px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    box-shadow: none;
+    text-decoration: none;
+    transition: background-color 0.15s ease, border-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-wrap .button:hover,
+.remove-comments-wrap .button-secondary:hover {
+    border-color: var(--remove-comments-primary);
+    background: #f7f7ff;
+    color: var(--remove-comments-primary-dark);
+}
+
+.remove-comments-wrap .button:focus-visible,
+.remove-comments-wrap .button-secondary:focus-visible {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.remove-comments-wrap .button.button-primary {
+    border-color: var(--remove-comments-primary);
+    background: var(--remove-comments-primary);
+    color: #fff;
+}
+
+.remove-comments-wrap .button.button-primary:hover {
+    border-color: var(--remove-comments-primary-dark);
+    background: var(--remove-comments-primary-dark);
+    color: #fff;
+}
+
+.remove-comments-wrap .button[disabled],
+.remove-comments-wrap .button.disabled { opacity: 0.5; cursor: not-allowed; }
+
+.remove-comments-wrap .button-small { height: 32px; padding: 0 12px; font-size: 12px; }
+.remove-comments-wrap .button-hero { height: 44px; padding: 0 22px; font-size: 14px; font-weight: 600; }
+
+.ulticocl-seg button { height: 38px; padding: 0 16px; }
+.ulticocl-seg-small button { height: 28px; padding: 0 12px; }
+
+/* ---- Fields ------------------------------------------------------------- */
+
+.remove-comments-wrap .remove-comments-form-group > label,
+.ulticocl-sublabel {
+    display: block;
+    margin: 0 0 8px;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 600;
+    line-height: 1.4;
+}
+
+.remove-comments-wrap .remove-comments-select,
+.remove-comments-wrap .remove-comments-form-group select {
+    max-width: none; /* WordPress caps selects at 25rem, which left one select narrower than its neighbours */
+    padding-right: 34px;
+    padding-left: 12px;
+    border-color: var(--remove-comments-gray-300);
+    -webkit-appearance: none;
+    appearance: none;
+    background-color: #fff;
+    background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20'%3E%3Cpath d='M5.5 7.5L10 12l4.5-4.5' fill='none' stroke='%236b7280' stroke-width='1.8' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E");
+    background-repeat: no-repeat;
+    background-position: right 10px center;
+    background-size: 18px;
+}
+
+.remove-comments-wrap .remove-comments-select:focus,
+.remove-comments-wrap .remove-comments-form-group select:focus,
+.remove-comments-wrap .remove-comments-form-group input[type="text"]:focus,
+.remove-comments-wrap .remove-comments-form-group input[type="email"]:focus,
+.remove-comments-wrap .remove-comments-form-group input[type="number"]:focus,
+.remove-comments-wrap .remove-comments-form-group textarea:focus,
+.remove-comments-wrap input.remove-comments-form-input:focus {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.remove-comments-wrap .remove-comments-form-group textarea,
+.remove-comments-wrap textarea.remove-comments-form-input {
+    box-sizing: border-box;
+    width: 100%;
+    padding: 10px 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    font-size: 13px;
+    line-height: 1.6;
+}
+
+.remove-comments-wrap #ulticocl-rule-keywords {
+    font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+    font-size: 12.5px;
+}
+
+/* Helper text sits flush with the field above it, not indented like a toggle's. */
+.remove-comments-wrap .remove-comments-form-group .description,
+.ulticocl-fieldset > .description {
+    margin: 8px 0 0;
+    color: var(--uc-muted);
+    font-size: 12px;
+    font-style: normal;
+    line-height: 1.55;
+}
+
+/* The row above ends with a 20px group margin, so pull the text up to sit 8px below its fields. */
+.ulticocl-fieldset > .description { margin: -12px 0 0; }
+
+/* A sentence with a field in the middle: keep the text and the box on one centre line. */
+.remove-comments-wrap .remove-comments-form-group .description.ulticocl-inline-field {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 4px 8px;
+}
+
+/* ---- Toggle fields: switches laid out on an aligned grid ------------------ */
+
+.ulticocl-toggle-grid {
+    display: grid;
+    grid-template-columns: repeat(var(--cols, 3), minmax(0, 1fr));
+    /* 16px between columns, the same as the input grids, so column edges line up down the form. */
+    gap: 12px 16px;
+}
+
+.ulticocl-toggle-grid[data-cols="2"] { --cols: 2; }
+.ulticocl-toggle-grid[data-cols="3"] { --cols: 3; }
+.ulticocl-toggle-grid[data-cols="4"] { --cols: 4; }
+
+.ulticocl-toggle-label {
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+}
+
+.ulticocl-toggle-grid .ulticocl-toggle,
+.ulticocl-field-toggle .ulticocl-toggle {
+    box-sizing: border-box;
+    width: 100%;
+    height: var(--ulticocl-field);
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    transition: border-color 0.15s ease, background-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-toggle-grid .ulticocl-toggle:hover,
+.ulticocl-field-toggle .ulticocl-toggle:hover { border-color: var(--remove-comments-gray-400); }
+
+.ulticocl-toggle-grid .ulticocl-toggle:has(input:checked),
+.ulticocl-field-toggle .ulticocl-toggle:has(input:checked) {
+    border-color: #c7d2fe;
+    background: #f5f6ff;
+    color: #3730a3;
+}
+
+.ulticocl-toggle-grid .ulticocl-toggle:has(input:focus-visible),
+.ulticocl-field-toggle .ulticocl-toggle:has(input:focus-visible) {
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+/* The tile already shows focus, so the switch itself does not need its own ring. */
+.ulticocl-toggle input:focus + .remove-comments-toggle-slider { box-shadow: none; }
+
+@media (max-width: 600px) {
+    .ulticocl-toggle-grid[data-cols="3"],
+    .ulticocl-toggle-grid[data-cols="4"] { --cols: 2; }
+}
+
+/* ---- Rule dialog -------------------------------------------------------- */
+
+.remove-comments-modal { background: rgba(17, 24, 39, 0.55); }
+
+.remove-comments-modal-content {
+    border-radius: var(--uc-radius-lg);
+    box-shadow: var(--uc-shadow-lg);
+}
+
+.remove-comments-modal-content.ulticocl-wide { padding: 28px 28px 24px; }
+
+.remove-comments-modal-content > h2 {
+    margin: 0 0 24px;
+    padding-right: 40px;
+    color: var(--uc-ink);
+    font-size: 20px;
+    font-weight: 700;
+    letter-spacing: -0.01em;
+    line-height: 1.3;
+}
+
+.remove-comments-modal-content > .remove-comments-modal-close { top: 22px; right: 26px; }
+
+.ulticocl-fieldset {
+    margin: 0 0 20px;
+    padding: 12px 20px 20px; /* the legend sits on the top border, so less is needed above than below */
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+}
+
+.ulticocl-fieldset legend {
+    margin-left: -4px;
+    padding: 0 8px;
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 700;
+}
+
+.ulticocl-grid-2, .ulticocl-grid-3 { gap: 0 16px; }
+
+.ulticocl-modal-footer-row,
+.remove-comments-modal-content .remove-comments-form-actions {
+    align-items: center;
+    gap: 12px;
+    margin-top: 24px;
+    padding-top: 20px;
+    border-top: 1px solid var(--uc-line);
+}
+
+.remove-comments-modal-content .remove-comments-form-actions .remove-comments-btn {
+    height: var(--ulticocl-field);
+    padding: 0 18px;
+    font-size: 13px;
+    font-weight: 600;
+}
+
+.remove-comments-modal-content .remove-comments-modal-close-btn {
+    width: var(--ulticocl-field);
+    height: var(--ulticocl-field);
+    margin-left: auto;
+    border-radius: var(--uc-radius);
+}
+
+/* ---- Filter bar --------------------------------------------------------- */
+
+.ulticocl-filters {
+    gap: 12px 20px;
+    margin: 0 0 16px;
+    padding: 12px 16px;
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+}
+
+.ulticocl-filters input[type="search"],
+.ulticocl-filters input[type="date"] {
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    line-height: 1.3;
+}
+
+.ulticocl-filters input[type="search"] { flex: 1 1 260px; min-width: 200px; }
+
+.ulticocl-filters input[type="search"]:focus,
+.ulticocl-filters input[type="date"]:focus {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.ulticocl-filter-field {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    margin: 0;
+    color: var(--uc-ink-2);
+    font-size: 13px;
+    font-weight: 500;
+}
+
+.ulticocl-reset {
+    color: var(--uc-muted);
+    font-size: 13px;
+    text-decoration: none;
+}
+
+.ulticocl-reset:hover { color: var(--remove-comments-primary); text-decoration: underline; }
+
+/* ---- Status views, bulk bar and pagination ------------------------------------ */
+
+.remove-comments-comments-panel .subsubsub {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 6px;
+    float: none;
+    margin: 0 0 16px;
+    padding: 0;
+    font-size: 0; /* hides the "|" separators WordPress prints between views */
+}
+
+.remove-comments-comments-panel .subsubsub li { margin: 0; padding: 0; font-size: 0; }
+
+.remove-comments-comments-panel .subsubsub a {
+    display: inline-flex;
+    align-items: center;
+    gap: 6px;
+    height: 32px;
+    padding: 0 12px;
+    border: 1px solid transparent;
+    border-radius: var(--uc-radius);
+    color: var(--uc-ink-2);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    text-decoration: none;
+    transition: background-color 0.15s ease, color 0.15s ease;
+}
+
+.remove-comments-comments-panel .subsubsub a:hover { background: var(--remove-comments-gray-100); color: var(--uc-ink); }
+
+.remove-comments-comments-panel .subsubsub a.current {
+    border-color: #e0e7ff;
+    background: #eef2ff;
+    color: #4338ca;
+    font-weight: 600;
+}
+
+.remove-comments-comments-panel .subsubsub .count { color: var(--uc-muted); font-weight: 400; }
+.remove-comments-comments-panel .subsubsub a.current .count { color: var(--remove-comments-primary); }
+
+.remove-comments-comments-panel .tablenav {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 12px;
+    height: auto;
+    margin: 0 0 12px;
+    padding: 0;
+}
+
+.remove-comments-comments-panel .tablenav.bottom { margin: 12px 0 0; }
+.remove-comments-comments-panel .tablenav .actions { display: inline-flex; align-items: center; gap: 8px; padding: 0; overflow: visible; }
+.remove-comments-comments-panel .tablenav .alignleft,
+.remove-comments-comments-panel .tablenav .alignright { float: none; }
+
+.remove-comments-comments-panel .tablenav .actions select {
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    min-width: 170px;
+    margin: 0;
+    padding: 0 34px 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    -webkit-appearance: none;
+    appearance: none;
+    background: #fff url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20 20'%3E%3Cpath d='M5.5 7.5L10 12l4.5-4.5' fill='none' stroke='%236b7280' stroke-width='1.8' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E") no-repeat right 10px center / 18px;
+    color: var(--uc-ink);
+    font-size: 13px;
+    line-height: 1.3;
+}
+
+.remove-comments-comments-panel .tablenav .actions select:focus { outline: none; border-color: var(--remove-comments-primary); box-shadow: var(--uc-focus); }
+
+.remove-comments-comments-panel .tablenav-pages {
+    display: inline-flex;
+    align-items: center;
+    gap: 10px;
+    margin: 0 0 0 auto;
+    color: var(--uc-muted);
+    font-size: 13px;
+}
+
+.remove-comments-comments-panel .tablenav-pages .pagination-links { display: inline-flex; align-items: center; gap: 6px; }
+.remove-comments-comments-panel .tablenav-pages .paging-input { display: inline-flex; align-items: center; gap: 6px; margin: 0; }
+
+.remove-comments-comments-panel .tablenav-pages .button,
+.remove-comments-comments-panel .tablenav-pages .tablenav-pages-navspan {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    box-sizing: border-box;
+    min-width: var(--ulticocl-field);
+    height: var(--ulticocl-field);
+    padding: 0 10px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    font-size: 16px;
+    line-height: 1;
+}
+
+.remove-comments-comments-panel .tablenav-pages .tablenav-pages-navspan { opacity: 0.45; border-style: dashed; }
+
+.remove-comments-comments-panel .tablenav-pages .current-page {
+    box-sizing: border-box;
+    width: 52px;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 6px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    text-align: center;
+}
+
+.remove-comments-comments-panel .tablenav-pages .current-page:focus { outline: none; border-color: var(--remove-comments-primary); box-shadow: var(--uc-focus); }
+
+/* ---- The comment table --------------------------------------------------- */
+
+.remove-comments-comments-panel .wp-list-table {
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    border-collapse: separate;
+    border-spacing: 0;
+    overflow: hidden;
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+}
+
+.remove-comments-comments-panel .wp-list-table thead th,
+.remove-comments-comments-panel .wp-list-table thead td,
+.remove-comments-comments-panel .wp-list-table tfoot th,
+.remove-comments-comments-panel .wp-list-table tfoot td {
+    padding: 12px 16px;
+    border: 0;
+    border-bottom: 1px solid var(--uc-line);
+    background: #f9fafb;
+    color: var(--uc-muted);
+    font-size: 12px;
+    font-weight: 600;
+    letter-spacing: 0.04em;
+    line-height: 1.4;
+    text-transform: uppercase;
+}
+
+.remove-comments-comments-panel .wp-list-table tfoot th,
+.remove-comments-comments-panel .wp-list-table tfoot td { border-top: 1px solid var(--uc-line); border-bottom: 0; }
+
+.remove-comments-comments-panel .wp-list-table tbody th,
+.remove-comments-comments-panel .wp-list-table tbody td {
+    padding: 16px;
+    border-bottom: 1px solid var(--uc-line-soft);
+    background: transparent;
+    color: var(--uc-ink-2);
+    font-size: 13px;
+    line-height: 1.55;
+    vertical-align: top;
+}
+
+.remove-comments-comments-panel .wp-list-table tbody tr:last-child th,
+.remove-comments-comments-panel .wp-list-table tbody tr:last-child td { border-bottom: 0; }
+
+/* No zebra stripes: the hairlines carry the structure. */
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr,
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr:nth-child(odd) { background: #fff; }
+
+.remove-comments-comments-panel .wp-list-table tbody tr { transition: background-color 0.12s ease; }
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr:hover { background: #fafbff; }
+.remove-comments-comments-panel .wp-list-table.striped > tbody > tr:has(.check-column input:checked) { background: #f5f6ff; }
+
+.remove-comments-comments-panel .wp-list-table .check-column {
+    width: 44px;
+    padding: 16px 0 0 16px;
+    vertical-align: top;
+}
+
+.remove-comments-comments-panel .wp-list-table thead .check-column,
+.remove-comments-comments-panel .wp-list-table tfoot .check-column { padding: 12px 0 12px 16px; vertical-align: middle; }
+
+/* The comment is what people read, so it gets the room; the rest stay compact. */
+.remove-comments-comments-panel .wp-list-table .column-author { width: 17%; }
+.remove-comments-comments-panel .wp-list-table .column-comment { width: 40%; }
+.remove-comments-comments-panel .wp-list-table .column-post,
+.remove-comments-comments-panel .wp-list-table .column-caught { width: 17%; }
+.remove-comments-comments-panel .wp-list-table .column-purge,
+.remove-comments-comments-panel .wp-list-table .column-date { width: 120px; }
+
+.remove-comments-comments-panel .wp-list-table .ulticocl-date { display: block; color: var(--uc-ink-2); white-space: nowrap; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-time { display: block; margin-top: 2px; color: var(--uc-muted); font-size: 12px; }
+
+/* Author cell: name, then quiet detail lines with an even 2px between them. */
+.remove-comments-comments-panel .wp-list-table .ulticocl-author-name { margin: 0; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-author-line { display: block; margin-top: 2px; color: var(--uc-muted); font-size: 12.5px; overflow-wrap: anywhere; }
+.remove-comments-comments-panel .wp-list-table code.ulticocl-author-line { display: inline-block; margin-top: 8px; }
+
+/* Comment cell: status, text, signals, actions, each separated by the same step. */
+.remove-comments-comments-panel .wp-list-table .ulticocl-comment-status { margin-bottom: 8px; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-comment-text { color: var(--uc-ink); overflow-wrap: anywhere; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-chips { display: flex; flex-wrap: wrap; gap: 6px; margin-top: 8px; }
+.remove-comments-comments-panel .wp-list-table .ulticocl-chip { margin: 0; white-space: nowrap; }
+
+.remove-comments-comments-panel .wp-list-table .column-author strong { display: block; margin-bottom: 2px; color: var(--uc-ink); font-size: 13.5px; }
+.remove-comments-comments-panel .wp-list-table .column-author code { padding: 1px 6px; border-radius: var(--uc-radius); background: var(--remove-comments-gray-100); color: var(--uc-ink-2); font-size: 12px; }
+.remove-comments-comments-panel .wp-list-table .column-author a,
+.remove-comments-comments-panel .wp-list-table .column-post a { color: var(--remove-comments-primary); text-decoration: none; }
+.remove-comments-comments-panel .wp-list-table .column-author a:hover,
+.remove-comments-comments-panel .wp-list-table .column-post a:hover { color: var(--remove-comments-primary-dark); text-decoration: underline; }
+
+.remove-comments-comments-panel .wp-list-table .column-comment { color: var(--uc-ink); }
+.remove-comments-comments-panel .wp-list-table .column-caught strong { color: var(--uc-ink); }
+
+.remove-comments-comments-panel .wp-list-table .row-actions { margin-top: 6px; padding: 0; color: var(--remove-comments-gray-300); font-size: 12px; }
+.remove-comments-comments-panel .wp-list-table .row-actions a { color: var(--remove-comments-primary); font-weight: 500; text-decoration: none; }
+.remove-comments-comments-panel .wp-list-table .row-actions a:hover { text-decoration: underline; }
+.remove-comments-comments-panel .wp-list-table .row-actions .delete a,
+.remove-comments-comments-panel .wp-list-table .row-actions .submitdelete { color: #b91c1c; }
+
+.remove-comments-comments-panel .wp-list-table tr.no-items td { padding: 48px 16px; color: var(--uc-muted); font-size: 14px; text-align: center; }
+
+/* Brand checkboxes for the table, so the select boxes match the switches elsewhere. */
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"] {
+    -webkit-appearance: none;
+    appearance: none;
+    position: relative;
+    flex: none;
+    width: 16px;
+    height: 16px;
+    margin: 0;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: 4px;
+    background: #fff;
+    box-shadow: none;
+    vertical-align: middle;
+    cursor: pointer;
+    transition: background-color 0.15s ease, border-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]:hover { border-color: var(--remove-comments-primary); }
+
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]:checked {
+    border-color: var(--remove-comments-primary);
+    background: var(--remove-comments-primary) url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'%3E%3Cpath d='M4 8.5l2.7 2.7L12 5.5' fill='none' stroke='%23fff' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E") center / 12px no-repeat;
+}
+
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]::before { content: none !important; display: none !important; }
+.remove-comments-comments-panel .wp-list-table input[type="checkbox"]:focus { outline: none; box-shadow: var(--uc-focus); }
+
+.remove-comments-comments-panel .notice.inline { margin: 0 0 16px; border-radius: var(--uc-radius); }
+
+/* ---- Smart Rules page ------------------------------------------------------ */
+
+.ulticocl-rules-toolbar {
+    display: flex;
+    align-items: center;
+    gap: 16px;
+    margin: 0 0 20px;
+}
+
+.ulticocl-rules-toolbar .ulticocl-presets { flex: 1; min-width: 0; margin: 0; }
+
+/* The one primary action on the page. */
+.ulticocl-add-btn {
+    display: inline-flex;
+    flex: none;
+    align-items: center;
+    gap: 8px;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 18px;
+    border: 1px solid var(--remove-comments-primary);
+    border-radius: var(--uc-radius);
+    background: var(--remove-comments-primary);
+    color: #fff;
+    font-size: 13px;
+    font-weight: 600;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    box-shadow: 0 1px 2px rgba(99, 102, 241, 0.35);
+    transition: background-color 0.15s ease, border-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-add-btn .dashicons { width: 16px; height: 16px; font-size: 16px; }
+
+.ulticocl-add-btn:hover { border-color: var(--remove-comments-primary-dark); background: var(--remove-comments-primary-dark); }
+.ulticocl-add-btn:focus-visible { outline: none; box-shadow: var(--uc-focus); }
+
+@media (max-width: 782px) {
+    .ulticocl-rules-toolbar { flex-direction: column; align-items: stretch; }
+    .ulticocl-add-btn { justify-content: center; }
+}
+
+.remove-comments-triggers-list { display: flex; flex-direction: column; gap: 16px; margin: 0; }
+
+.ulticocl-rule {
+    padding: 20px 24px;
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+    transition: border-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-rule:hover { border-color: var(--remove-comments-gray-300); box-shadow: 0 6px 16px rgba(17, 24, 39, 0.06); }
+
+.ulticocl-rule-head {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 16px;
+    margin-bottom: 16px;
+}
+
+.ulticocl-rule-head h3 { margin: 0; padding: 0; color: var(--uc-ink); font-size: 16px; font-weight: 600; line-height: 1.3; }
+.ulticocl-rule-badges { display: flex; flex: none; align-items: center; gap: 8px; }
+
+.ulticocl-rule-meta {
+    display: grid;
+    grid-template-columns: repeat(3, minmax(0, 1fr));
+    gap: 16px 24px;
+    margin: 0 0 20px;
+    padding: 0;
+}
+
+.ulticocl-rule-meta > div { min-width: 0; }
+.ulticocl-rule-meta > .is-wide { grid-column: 1 / -1; }
+
+.ulticocl-rule-meta dt {
+    margin: 0 0 4px;
+    color: var(--uc-muted);
+    font-size: 11px;
+    font-weight: 600;
+    letter-spacing: 0.06em;
+    text-transform: uppercase;
+}
+
+.ulticocl-rule-meta dd { margin: 0; color: var(--uc-ink); font-size: 13px; line-height: 1.5; overflow-wrap: anywhere; }
+
+.ulticocl-rule-actions {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 8px;
+    padding-top: 16px;
+    border-top: 1px solid var(--uc-line-soft);
+}
+
+.ulticocl-rbtn {
+    display: inline-flex;
+    align-items: center;
+    gap: 6px;
+    height: 36px;
+    margin: 0;
+    padding: 0 14px 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1;
+    white-space: nowrap;
+    cursor: pointer;
+    transition: background-color 0.15s ease, border-color 0.15s ease, color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.ulticocl-rbtn .dashicons { width: 16px; height: 16px; font-size: 16px; color: var(--uc-muted); transition: color 0.15s ease; }
+
+.ulticocl-rbtn:hover { border-color: var(--remove-comments-primary); background: #f7f7ff; color: var(--remove-comments-primary-dark); }
+.ulticocl-rbtn:hover .dashicons { color: var(--remove-comments-primary); }
+.ulticocl-rbtn:focus-visible { outline: none; border-color: var(--remove-comments-primary); box-shadow: var(--uc-focus); }
+
+.ulticocl-rbtn.is-primary { border-color: var(--remove-comments-primary); background: var(--remove-comments-primary); color: #fff; }
+.ulticocl-rbtn.is-primary .dashicons { color: #fff; }
+.ulticocl-rbtn.is-primary:hover { border-color: var(--remove-comments-primary-dark); background: var(--remove-comments-primary-dark); color: #fff; }
+
+/* Delete sits apart at the far end and stays quiet until hovered. */
+.ulticocl-rbtn.is-danger { margin-left: auto; border-color: transparent; background: transparent; color: #b91c1c; }
+.ulticocl-rbtn.is-danger .dashicons { color: #b91c1c; }
+.ulticocl-rbtn.is-danger:hover { border-color: #fecaca; background: #fef2f2; color: #991b1b; }
+.ulticocl-rbtn.is-danger:focus-visible { box-shadow: 0 0 0 3px rgba(239, 68, 68, 0.25); }
+
+.ulticocl-badge { display: inline-flex; align-items: center; gap: 6px; }
+.ulticocl-badge-on { background: #d1fae5; color: #065f46; }
+.ulticocl-badge-off { background: var(--remove-comments-gray-100); color: var(--uc-ink-2); }
+.ulticocl-badge-on::before,
+.ulticocl-badge-off::before { content: ""; width: 6px; height: 6px; border-radius: 50%; background: currentColor; }
+
+.remove-comments-empty-state {
+    padding: 40px 24px;
+    border: 1px dashed var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius-lg);
+    background: var(--remove-comments-gray-50);
+    color: var(--uc-muted);
+    text-align: center;
+}
+
+.remove-comments-empty-state p { margin: 0; font-size: 14px; }
+
+@media (max-width: 782px) {
+    .ulticocl-rule-meta { grid-template-columns: 1fr; }
+    .ulticocl-rule-head { align-items: flex-start; flex-direction: column; gap: 8px; }
+}
+
+/* ---- Bulk Clean and Settings: same cards, switches and footer as the rest ------------- */
+
+/* Every on/off switch in the plugin is the small brand switch. */
+.remove-comments-toggle-switch { width: 32px; height: 18px; }
+.remove-comments-toggle-slider { border-radius: 18px; }
+
+.remove-comments-toggle-slider:before {
+    width: 12px;
+    height: 12px;
+    left: 3px;
+    bottom: 3px;
+    box-shadow: 0 1px 2px rgba(0, 0, 0, 0.25);
+}
+
+.remove-comments-toggle-switch input:checked + .remove-comments-toggle-slider:before { transform: translateX(14px); }
+
+.remove-comments-toggle-label {
+    color: var(--uc-ink);
+    font-size: 13px;
+    font-weight: 500;
+    line-height: 1.3;
+}
+
+/* Sections become cards, like the dashboard's. */
+.remove-comments-form-section {
+    margin: 0 0 16px;
+    padding: 20px 24px;
+    border: 1px solid var(--uc-line);
+    border-radius: var(--uc-radius-lg);
+    background: #fff;
+    box-shadow: var(--uc-shadow);
+}
+
+.remove-comments-form-section h3 {
+    margin: 0 0 16px;
+    padding: 0;
+    border: 0;
+    color: var(--uc-ink);
+    font-size: 15px;
+    font-weight: 600;
+    line-height: 1.3;
+}
+
+.remove-comments-form-section > :last-child,
+.remove-comments-form-section > .remove-comments-form-group:last-child { margin-bottom: 0; }
+.remove-comments-form-section .ulticocl-grid-2 > .remove-comments-form-group { margin-bottom: 0; }
+.remove-comments-form-section .ulticocl-row-after-toggles { margin-top: 16px; }
+
+/* Switch groups become the same aligned tiles as in the rule dialog. */
+.remove-comments-form-section .remove-comments-checkbox-group {
+    display: grid;
+    grid-template-columns: repeat(auto-fill, minmax(190px, 1fr));
+    gap: 12px 16px;
+    margin: 0;
+}
+
+.remove-comments-form-section .remove-comments-checkbox-group label {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    box-sizing: border-box;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    cursor: pointer;
+    transition: border-color 0.15s ease, background-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-form-section .remove-comments-checkbox-group label:hover { border-color: var(--remove-comments-gray-400); background: #fff; }
+
+.remove-comments-form-section .remove-comments-checkbox-group label:has(input:checked) {
+    border-color: #c7d2fe;
+    background: #f5f6ff;
+}
+
+.remove-comments-form-section .remove-comments-checkbox-group label:has(input:checked) .remove-comments-toggle-label { color: #3730a3; }
+
+.remove-comments-form-section .remove-comments-checkbox-group label:has(input:focus-visible) {
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.remove-comments-checkbox-group .remove-comments-toggle-label { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+
+/* Date range: two fields on the same 16px grid as everything else. */
+.remove-comments-date-range { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 0 16px; }
+
+.remove-comments-date-input label {
+    display: block;
+    margin: 0 0 8px;
+    color: var(--remove-comments-gray-700);
+    font-size: 13px;
+    font-weight: 600;
+}
+
+.remove-comments-wrap .remove-comments-date-input input[type="date"] {
+    box-sizing: border-box;
+    width: 100%;
+    height: var(--ulticocl-field);
+    margin: 0;
+    padding: 0 12px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: #fff;
+    color: var(--uc-ink);
+    font-size: 13px;
+    line-height: 1.3;
+}
+
+.remove-comments-wrap .remove-comments-date-input input[type="date"]:focus {
+    outline: none;
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+/* Settings: a switch, its label, and helper text lined up under the label. */
+.remove-comments-wrap .remove-comments-form-group > label:has(.remove-comments-toggle-switch) { gap: 12px; }
+
+.remove-comments-wrap .remove-comments-form-group > label:has(.remove-comments-toggle-switch) + .description {
+    margin: 4px 0 0 44px; /* 32px switch + 12px gap, so the text sits under its label */
+}
+
+.remove-comments-wrap #ulticocl_quarantine_days {
+    box-sizing: border-box;
+    width: 110px;
+    height: var(--ulticocl-field);
+    padding: 0 12px;
+}
+
+/* ---- Form footer: secondary actions left, the one primary action right ------------------- */
+
+.remove-comments-form-actions {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 12px;
+    margin-top: 8px;
+    padding-top: 20px;
+    border-top: 1px solid var(--uc-line);
+}
+
+.remove-comments-form-actions .remove-comments-btn {
+    height: var(--ulticocl-field);
+    padding: 0 18px;
+    font-size: 13px;
+    font-weight: 600;
+}
+
+.ulticocl-form-footer .ulticocl-rbtn { height: var(--ulticocl-field); padding: 0 16px 0 14px; }
+.ulticocl-form-footer .ulticocl-apply { margin-left: auto; }
+
+/* The Apply button turns red when the chosen action cannot be undone. */
+.ulticocl-apply[data-action="delete"] {
+    border-color: var(--remove-comments-danger);
+    background: var(--remove-comments-danger);
+    box-shadow: 0 1px 2px rgba(239, 68, 68, 0.35);
+}
+
+.ulticocl-apply[data-action="delete"]:hover { border-color: #dc2626; background: #dc2626; }
+.ulticocl-apply[data-action="delete"]:focus-visible { box-shadow: 0 0 0 3px rgba(239, 68, 68, 0.25); }
+
+.remove-comments-preview-result {
+    margin-top: 16px;
+    padding: 12px 16px;
+    border: 1px solid #bfdbfe;
+    border-left: 4px solid var(--remove-comments-info);
+    border-radius: var(--uc-radius);
+    background: #f5f9ff;
+    color: var(--uc-ink);
+    font-size: 13px;
+}
+
+@media (max-width: 782px) {
+    .remove-comments-date-range { grid-template-columns: 1fr; gap: 16px; }
+    .ulticocl-form-footer .ulticocl-apply { margin-left: 0; width: 100%; justify-content: center; }
+}
+
+/* ---- Card rhythm: one 16px gap, whatever is inside (also holds when a field is hidden) ---- */
+
+.remove-comments-form-section { display: flex; flex-direction: column; gap: 16px; }
+.remove-comments-form-section > * { margin: 0; }
+.remove-comments-form-section > .remove-comments-form-group { margin: 0; }
+.remove-comments-form-section .ulticocl-row-after-toggles { margin-top: 0; }
+.remove-comments-form-section h3 { margin: 0; }
+
+.remove-comments-panel-header p { max-width: 84ch; }
+
+/* Settings switch rows: the helper text sits right under its label. */
+.remove-comments-wrap .remove-comments-form-group > label:has(.remove-comments-toggle-switch) { margin-bottom: 0; }
+
+/* Label -> control is 8px everywhere: the date fields were adding a flex gap on top of the label margin. */
+.remove-comments-date-input { gap: 0; }
+
+/* Helper text hugs the select it explains instead of floating a full row below it. */
+.remove-comments-form-section > .description { margin-top: -8px; }
+
+/* ---- Phones: one column of tiles, full-width actions, snugger cards ------------------------ */
+
+@media (max-width: 600px) {
+    .remove-comments-form-section { padding: 16px; }
+    .remove-comments-form-section .ulticocl-toggle-grid[data-cols] { --cols: 1; }
+    .remove-comments-form-section .ulticocl-toggle-label { white-space: normal; line-height: 1.2; }
+    .remove-comments-form-section .ulticocl-grid-2 { grid-template-columns: 1fr; }
+
+    .ulticocl-form-footer { flex-direction: column; align-items: stretch; }
+    .ulticocl-form-footer > button { width: 100%; justify-content: center; }
+}
+
+/* ---- Rule dialog: the on/off switch is a status card, not a footnote ----------------------- */
+
+.remove-comments-toggle-switch.ulticocl-large { flex: none; width: 44px; height: 24px; }
+.ulticocl-large .remove-comments-toggle-slider { border-radius: 24px; }
+
+.ulticocl-large .remove-comments-toggle-slider:before {
+    width: 18px;
+    height: 18px;
+    left: 3px;
+    bottom: 3px;
+}
+
+.ulticocl-large input:checked + .remove-comments-toggle-slider:before { transform: translateX(20px); }
+
+.remove-comments-modal .ulticocl-status-card {
+    display: flex;
+    align-items: center;
+    gap: 16px;
+    box-sizing: border-box;
+    margin: 0 0 20px;
+    padding: 14px 16px;
+    border: 1px solid var(--remove-comments-gray-300);
+    border-radius: var(--uc-radius);
+    background: var(--remove-comments-gray-50);
+    cursor: pointer;
+    transition: border-color 0.15s ease, background-color 0.15s ease, box-shadow 0.15s ease;
+}
+
+.remove-comments-modal .ulticocl-status-card:hover { border-color: var(--remove-comments-gray-400); }
+
+.remove-comments-modal .ulticocl-status-card:has(input:checked) {
+    border-color: #c7d2fe;
+    background: #f5f6ff;
+}
+
+.remove-comments-modal .ulticocl-status-card:has(input:focus-visible) {
+    border-color: var(--remove-comments-primary);
+    box-shadow: var(--uc-focus);
+}
+
+.ulticocl-status-text { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+
+.ulticocl-status-title { color: var(--uc-ink); font-size: 14px; font-weight: 600; line-height: 1.3; }
+.ulticocl-status-card:has(input:checked) .ulticocl-status-title { color: #3730a3; }
+
+.ulticocl-status-help { color: var(--uc-muted); font-size: 12.5px; line-height: 1.5; }

ultimate-comment-cleaner/trunk/assets/js/admin.js

@@ -1 +1 @@
 jQuery(document).ready(function($) {
     'use strict';
-    
+
+    const { __, _n, sprintf } = wp.i18n;
+    const td = 'ultimate-comment-cleaner';
+
     // Helper function to show native alert
     function showAlert(message, type) {
         if (type === 'error') {
-            alert('Error: ' + message);
-        } else if (type === 'success') {
-            alert('Success: ' + message);
+            alert(sprintf(__('Error: %s', td), message));
         } else {
             alert(message);
         }
     }
-    
-    // Helper function to show native confirm
-    function showConfirm(message, callback) {
-        if (confirm(message)) {
-            if (callback) callback();
-        }
-    }
-    
-    // Delete Comments Form
+
+    function errorMessage(response) {
+        return (response && response.data && response.data.message) || __('An error occurred. Please try again.', td);
+    }
+
+    function post(data) {
+        return $.post(ulticoclData.ajaxurl, $.extend({ nonce: ulticoclData.nonce }, data));
+    }
+
+    function isOn(value) {
+        return value === true || value === 1 || value === '1';
+    }
+
+    // ---------------------------------------------------------------------
+    // Bulk Clean: count first, confirm with the real number, then work in batches
+    // ---------------------------------------------------------------------
+
+    function confirmText(action, count) {
+        const n = count.toLocaleString();
+        if (action === 'delete') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Permanently delete %s comment? This cannot be undone.', 'Permanently delete %s comments? This cannot be undone.', count, td), n);
+        }
+        if (action === 'spam') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Mark %s comment as spam?', 'Mark %s comments as spam?', count, td), n);
+        }
+        /* translators: %s: number of comments */
+        return sprintf(_n('Move %s comment to quarantine? You can restore it from the Quarantine tab.', 'Move %s comments to quarantine? You can restore them from the Quarantine tab.', count, td), n);
+    }
+
+    function runBulk(filters) {
+        post($.extend({ action: 'ulticocl_preview_count' }, filters)).done(function(response) {
+            if (!response.success) {
+                showAlert(errorMessage(response), 'error');
+                return;
+            }
+            const count = response.data.count;
+            if (count === 0) {
+                showAlert(__('No comments match your criteria.', td));
+                return;
+            }
+            if (confirm(confirmText(filters.clean_action, count))) {
+                processBulk(filters, count);
+            }
+        }).fail(function() {
+            showAlert(__('An error occurred. Please try again.', td), 'error');
+        });
+    }
+
+    function processBulk(filters, expected) {
+        const progress = $('<div>').addClass('ulticocl-progress-box').attr('role', 'status');
+        $('body').append(progress);
+
+        function step(processedSoFar) {
+            progress.text(sprintf(
+                /* translators: 1: comments processed so far, 2: total comments */
+                __('Working... %1$s of %2$s', td),
+                processedSoFar.toLocaleString(),
+                expected.toLocaleString()
+            ));
+            post($.extend({ action: 'ulticocl_bulk_process', processed_so_far: processedSoFar }, filters)).done(function(response) {
+                if (!response.success) {
+                    progress.remove();
+                    showAlert(errorMessage(response), 'error');
+                    return;
+                }
+                if (!response.data.done) {
+                    step(response.data.total);
+                    return;
+                }
+                progress.remove();
+                let message = response.data.message;
+                if (response.data.remaining > 0) {
+                    message += '\n' + sprintf(
+                        /* translators: %s: number of comments */
+                        __('%s matching comments could not be changed.', td),
+                        response.data.remaining.toLocaleString()
+                    );
+                }
+                showAlert(message);
+                location.reload();
+            }).fail(function() {
+                progress.remove();
+                showAlert(__('An error occurred while processing comments.', td), 'error');
+            });
+        }
+
+        step(0);
+    }
+
     $('#remove-comments-delete-form').on('submit', function(e) {
         e.preventDefault();
-        
-        const formData = $(this).serialize();
-        const selectedStatus = $('input[name="status[]"]:checked').length;
-        
-        if (selectedStatus === 0) {
-            showAlert('Please select at least one status to delete.', 'error');
+
+        if ($('input[name="status[]"]:checked').length === 0) {
+            showAlert(__('Please select at least one status.', td), 'error');
             return;
         }
-        
-        showConfirm('Are you sure? This will permanently delete the selected comments. This action cannot be undone!', function() {
-            deleteComments(formData);
-        });
-    });
-    
+        runBulk(getFormData());
+    });
+
+    // Quarantine tab: delete everything quarantined
+    $('#ulticocl-empty-quarantine').on('click', function() {
+        runBulk({ status: ['quarantine'], clean_action: 'delete' });
+    });
+
     // Preview Count
     $('#remove-comments-preview-count').on('click', function() {
-        const formData = $('#remove-comments-delete-form').serialize() + '&action=ulticocl_preview_count';
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'ulticocl_preview_count',
-                nonce: ulticoclData.nonce,
-                ...getFormData()
-            },
-            beforeSend: function() {
-                $('#remove-comments-preview-count').prop('disabled', true).text('Counting...');
-            },
-            success: function(response) {
-                if (response.success) {
-                    $('#remove-comments-preview-result').html(
-                        `Found <strong>${response.data.count}</strong> comments matching your criteria.`
-                    ).show();
-                } else {
-                    showAlert(response.data.message || 'An error occurred.', 'error');
-                }
-            },
-            complete: function() {
-                $('#remove-comments-preview-count').prop('disabled', false).text('Preview Count');
-            }
-        });
-    });
-    
+        const button = $(this);
+        const label = button.find('.ulticocl-btn-label');
+        const originalText = label.text();
+        button.prop('disabled', true);
+        label.text(__('Counting...', td));
+
+        post($.extend({ action: 'ulticocl_preview_count' }, getFormData())).done(function(response) {
+            if (response.success) {
+                const count = response.data.count;
+                $('#remove-comments-preview-result').text(sprintf(
+                    /* translators: %s: number of comments */
+                    _n('Found %s comment matching your criteria.', 'Found %s comments matching your criteria.', count, td),
+                    count.toLocaleString()
+                )).show();
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        }).always(function() {
+            button.prop('disabled', false);
+            label.text(originalText);
+        });
+    });
+
+    // Bulk Clean: describe what the chosen action does, and let the button's colour follow the consequence.
+    (function() {
+        const select = $('#remove-comments-clean-action');
+        if (!select.length) {
+            return;
+        }
+        const help = {
+            quarantine: __('Hidden from your site. You can restore them from the Quarantine tab.', td),
+            spam: __('Moved to the spam folder.', td),
+            'delete': __('Removed permanently. This cannot be undone.', td)
+        };
+        const sync = function() {
+            const action = select.val();
+            $('#ulticocl-action-help').text(help[action] || '');
+            $('#remove-comments-delete-btn').attr('data-action', action);
+        };
+        select.on('change', sync);
+        sync();
+    })();
+
     // Export Comments
     $('#remove-comments-export-btn, #remove-comments-export-all').on('click', function() {
         const formData = getFormData();
+        delete formData.clean_action;
         formData.action = 'ulticocl_export_comments';
         formData.nonce = ulticoclData.nonce;
-        
+        // The dashboard button has no filter form: export everything.
+        if (!formData.status) {
+            formData.status = ['all'];
+        }
+
         // Create form and submit
         const form = $('<form>', {
@@ -79 +181 @@
             target: '_blank'
         });
-        
+
         Object.keys(formData).forEach(key => {
-            form.append($('<input>', {
-                type: 'hidden',
-                name: key,
-                value: formData[key]
-            }));
-        });
-        
+            // Arrays must be sent as key[] so PHP receives them as arrays.
+            [].concat(formData[key]).forEach(value => {
+                form.append($('<input>', {
+                    type: 'hidden',
+                    name: Array.isArray(formData[key]) ? key + '[]' : key,
+                    value: value
+                }));
+            });
+        });
+
         $('body').append(form);
         form.submit();
         form.remove();
     });
-    
-    // Add Trigger
-    $('#remove-comments-add-trigger').on('click', function() {
-        $('#remove-comments-trigger-form')[0].reset();
-        $('#remove-comments-trigger-id').val('');
-        $('#remove-comments-trigger-modal').show();
-    });
-    
-    // Edit Trigger
-    $(document).on('click', '.remove-comments-edit-trigger', function() {
-        const triggerId = $(this).data('id');
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'ulticocl_get_trigger',
-                nonce: ulticoclData.nonce,
-                trigger_id: triggerId
-            },
-            success: function(response) {
-                if (response.success) {
-                    const trigger = response.data;
-                    $('#remove-comments-trigger-id').val(triggerId);
-                    $('#remove-comments-trigger-name').val(trigger.name);
-                    $('#remove-comments-trigger-status').val(trigger.status);
-                    $('#remove-comments-trigger-older').val(trigger.older_than);
-                    $('#remove-comments-trigger-schedule').val(trigger.schedule);
-                    $('#remove-comments-trigger-active').prop('checked', trigger.active);
-                    $('#remove-comments-trigger-modal').show();
-                }
-            }
-        });
-    });
-    
-    // Delete Trigger
-    $(document).on('click', '.remove-comments-delete-trigger', function() {
-        const triggerId = $(this).data('id');
-        
-        showConfirm('Are you sure you want to delete this trigger?', function() {
-            $.ajax({
-                url: ulticoclData.ajaxurl,
-                type: 'POST',
-                data: {
-                    action: 'ulticocl_delete_trigger',
-                    nonce: ulticoclData.nonce,
-                    trigger_id: triggerId
-                },
-                success: function(response) {
-                    if (response.success) {
-                        showAlert('Trigger has been deleted.', 'success');
-                        location.reload();
-                    } else {
-                        showAlert(response.data.message || 'An error occurred.', 'error');
-                    }
-                }
-            });
-        });
-    });
-    
-    // Save Trigger
-    $('#remove-comments-trigger-form').on('submit', function(e) {
-        e.preventDefault();
-        
-        const formData = {
-            action: 'ulticocl_save_trigger',
-            nonce: ulticoclData.nonce,
-            trigger_id: $('#remove-comments-trigger-id').val(),
-            name: $('#remove-comments-trigger-name').val(),
-            status: $('#remove-comments-trigger-status').val(),
-            older_than: $('#remove-comments-trigger-older').val(),
-            schedule: $('#remove-comments-trigger-schedule').val(),
-            active: $('#remove-comments-trigger-active').is(':checked') ? 1 : 0
-        };
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: formData,
-            success: function(response) {
-                if (response.success) {
-                    showAlert('Trigger has been saved successfully.', 'success');
-                    setTimeout(function() {
-                        location.reload();
-                    }, 1000);
-                } else {
-                    showAlert(response.data.message || 'An error occurred.', 'error');
-                }
-            }
-        });
-    });
-    
-    // Close Modal
-    $('.remove-comments-modal-close').on('click', function() {
-        $('#remove-comments-trigger-modal').hide();
-    });
-    
-    // Close modal on outside click
-    $(window).on('click', function(e) {
-        if ($(e.target).hasClass('rc-modal')) {
-            $('.remove-comments-modal').hide();
-        }
-    });
-    
-    // Helper Functions
-    function deleteComments(formData) {
-        const data = {
-            action: 'ulticocl_delete_comments',
-            nonce: ulticoclData.nonce,
-            ...getFormData()
-        };
-        
-        // Show loading message
-        const loadingMsg = $('<div>').text('Deleting comments... Please wait.').css({
-            position: 'fixed',
-            top: '50%',
-            left: '50%',
-            transform: 'translate(-50%, -50%)',
-            background: '#fff',
-            padding: '20px',
-            border: '2px solid #6366f1',
-            borderRadius: '4px',
-            zIndex: 9999,
-            boxShadow: '0 4px 6px rgba(0,0,0,0.1)'
-        });
-        $('body').append(loadingMsg);
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: data,
-            success: function(response) {
-                loadingMsg.remove();
-                if (response.success) {
-                    showAlert(response.data.message, 'success');
-                    setTimeout(function() {
-                        location.reload();
-                    }, 1000);
-                } else {
-                    showAlert(response.data.message || 'An error occurred.', 'error');
-                }
-            },
-            error: function() {
-                loadingMsg.remove();
-                showAlert('An error occurred while deleting comments.', 'error');
-            }
-        });
-    }
-    
+
     function getFormData() {
         const data = {};
-        
+
         // Get status checkboxes
         const statuses = [];
@@ -252 +209 @@
             data.status = statuses;
         }
-        
+
         // Get date range
         const dateFrom = $('#remove-comments-date-from').val();
@@ -258 +215 @@
         if (dateFrom) data.date_from = dateFrom;
         if (dateTo) data.date_to = dateTo;
-        
+
         // Get post types
         const postTypes = [];
@@ -267 +224 @@
             data.post_type = postTypes;
         }
-        
+
         // Get author
         const author = $('#remove-comments-author-filter').val();
@@ -273 +230 @@
             data.author = author;
         }
-        
+
+        // Search text
+        const search = $('#remove-comments-search').val();
+        if (search && search.trim() !== '') {
+            data.search = search.trim();
+        }
+
         // Additional filters
         if ($('input[name="has_url"]').is(':checked')) {
@@ -284 +247 @@
             data.short_comments = 1;
         }
-        
+
         const minWords = $('input[name="min_words"]').val();
         const maxWords = $('input[name="max_words"]').val();
         if (minWords) data.min_words = minWords;
         if (maxWords) data.max_words = maxWords;
-        
+
+        data.clean_action = $('#remove-comments-clean-action').val() || 'quarantine';
+
         return data;
     }
-    
-    // Auto-refresh stats every 30 seconds on dashboard
-    if ($('.remove-comments-dashboard').length) {
-        setInterval(function() {
-            $.ajax({
-                url: ulticoclData.ajaxurl,
-                type: 'POST',
-                data: {
-                    action: 'ulticocl_get_stats',
-                    nonce: ulticoclData.nonce
-                },
-                success: function(response) {
-                    if (response.success) {
-                        updateStats(response.data);
-                    }
-                }
+
+    // ---------------------------------------------------------------------
+    // Smart Rules
+    // ---------------------------------------------------------------------
+
+    const $modal = $('#ulticocl-rule-modal');
+    const $form = $('#ulticocl-rule-form');
+    const $result = $('#ulticocl-scan-result');
+
+    function setChecks(name, values) {
+        values = [].concat(values || []);
+        $form.find('input[name="' + name + '[]"]').each(function() {
+            $(this).prop('checked', values.indexOf($(this).val()) !== -1);
+        });
+    }
+
+    function checked(name) {
+        return $form.find('input[name="' + name + '[]"]:checked').map(function() {
+            return this.value;
+        }).get();
+    }
+
+    function toggleScope() {
+        $('.ulticocl-existing-only').toggle($('#ulticocl-rule-scope').val() !== 'new');
+    }
+
+    // The status card reads "active" or "paused" to match the switch.
+    function syncStatusCard() {
+        const on = $('#ulticocl-rule-active').is(':checked');
+        $('.ulticocl-status-title, .ulticocl-status-help').each(function() {
+            $(this).text($(this).attr(on ? 'data-on' : 'data-off'));
+        });
+    }
+
+    function fillRuleForm(rule, title) {
+        rule = $.extend({}, ulticoclData.ruleDefaults, rule);
+        $('#ulticocl-rule-title').text(title);
+        $('#ulticocl-rule-id').val(rule.id || '');
+        $('#ulticocl-rule-name').val(rule.name);
+        $('#ulticocl-rule-scope').val(rule.scope);
+        $('#ulticocl-rule-action').val(rule.action);
+        $('#ulticocl-rule-mode').val(rule.mode);
+        $('#ulticocl-rule-schedule').val(rule.schedule);
+        $('#ulticocl-rule-keywords').val([].concat(rule.keywords || []).join('\n'));
+        setChecks('fields', rule.fields);
+        setChecks('scripts', rule.scripts);
+        setChecks('status', rule.status);
+        $('#ulticocl-rule-pct').val(rule.script_min_pct);
+        $('#ulticocl-rule-links').val(rule.min_links);
+        $('#ulticocl-rule-words').val(rule.max_words);
+        $('#ulticocl-rule-older').val(rule.older_than);
+        $('#ulticocl-rule-has-url').prop('checked', isOn(rule.has_url));
+        $('#ulticocl-rule-active').prop('checked', isOn(rule.active));
+        syncStatusCard();
+        toggleScope();
+        $modal.show();
+        $('#ulticocl-rule-name').trigger('focus');
+    }
+
+    function rulePayload() {
+        return {
+            rule_id: $('#ulticocl-rule-id').val(),
+            name: $('#ulticocl-rule-name').val(),
+            scope: $('#ulticocl-rule-scope').val(),
+            rule_action: $('#ulticocl-rule-action').val(),
+            mode: $('#ulticocl-rule-mode').val(),
+            schedule: $('#ulticocl-rule-schedule').val(),
+            keywords: $('#ulticocl-rule-keywords').val(),
+            fields: checked('fields'),
+            scripts: checked('scripts'),
+            status: checked('status'),
+            script_min_pct: $('#ulticocl-rule-pct').val(),
+            min_links: $('#ulticocl-rule-links').val(),
+            max_words: $('#ulticocl-rule-words').val(),
+            older_than: $('#ulticocl-rule-older').val(),
+            has_url: $('#ulticocl-rule-has-url').is(':checked') ? 1 : 0,
+            active: $('#ulticocl-rule-active').is(':checked') ? 1 : 0
+        };
+    }
+
+    $('#ulticocl-rule-scope').on('change', toggleScope);
+    $('#ulticocl-rule-active').on('change', syncStatusCard);
+
+    $('#ulticocl-add-rule').on('click', function() {
+        fillRuleForm({}, __('New Smart Rule', td));
+    });
+
+    // Quick-start presets sit in one row that glides left and right with the pointer.
+    (function() {
+        const viewport = document.getElementById('ulticocl-presets');
+        if (!viewport) {
+            return;
+        }
+        const reduceMotion = window.matchMedia && window.matchMedia('(prefers-reduced-motion: reduce)').matches;
+        let target = 0;
+        let frame = 0;
+        const range = function() {
+            return viewport.scrollWidth - viewport.clientWidth;
+        };
+        // Fade the side that still has buttons behind it.
+        const edges = function() {
+            viewport.classList.toggle('has-left', viewport.scrollLeft > 2);
+            viewport.classList.toggle('has-right', viewport.scrollLeft < range() - 2);
+        };
+        const glide = function() {
+            const diff = target - viewport.scrollLeft;
+            if (Math.abs(diff) < 0.5) {
+                viewport.scrollLeft = target;
+                frame = 0;
+                return;
+            }
+            viewport.scrollLeft += diff * 0.14;
+            frame = requestAnimationFrame(glide);
+        };
+        viewport.addEventListener('pointermove', function(event) {
+            if (event.pointerType === 'touch' || range() <= 0) {
+                return; // touch scrolls natively
+            }
+            const box = viewport.getBoundingClientRect();
+            // The outer 12% on each side is the dead zone that reaches the first and last button.
+            const ratio = Math.min(1, Math.max(0, ((event.clientX - box.left) / box.width - 0.12) / 0.76));
+            target = ratio * range();
+            if (reduceMotion) {
+                viewport.scrollLeft = target;
+            } else if (!frame) {
+                frame = requestAnimationFrame(glide);
+            }
+        });
+        viewport.addEventListener('scroll', edges, { passive: true });
+        window.addEventListener('resize', edges);
+        edges();
+    })();
+
+    // Quick start: open a ready-made rule for review before saving
+    $('.ulticocl-preset').on('click', function() {
+        fillRuleForm(ulticoclData.presets[$(this).data('preset')], __('New Smart Rule', td));
+    });
+
+    $(document).on('click', '.ulticocl-edit-rule', function() {
+        const id = $(this).data('id');
+        post({ action: 'ulticocl_get_rule', rule_id: id }).done(function(response) {
+            if (response.success) {
+                fillRuleForm($.extend({ id: id }, response.data), __('Edit Smart Rule', td));
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        });
+    });
+
+    $(document).on('click', '.ulticocl-delete-rule', function() {
+        const id = $(this).data('id');
+        if (!confirm(__('Delete this rule? Comments it already caught stay where they are.', td))) {
+            return;
+        }
+        post({ action: 'ulticocl_delete_rule', rule_id: id }).done(function(response) {
+            if (response.success) {
+                location.reload();
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        });
+    });
+
+    $form.on('submit', function(e) {
+        e.preventDefault();
+        post($.extend({ action: 'ulticocl_save_rule' }, rulePayload())).done(function(response) {
+            if (response.success) {
+                location.reload();
+            } else {
+                showAlert(errorMessage(response), 'error');
+            }
+        }).fail(function() {
+            showAlert(__('An error occurred. Please try again.', td), 'error');
+        });
+    });
+
+    // Close Modal
+    $('.remove-comments-modal-close').on('click', function() {
+        $modal.hide();
+    });
+
+    // Close modal on outside click
+    $(window).on('click', function(e) {
+        if ($(e.target).is('.remove-comments-modal')) {
+            $('.remove-comments-modal').hide();
+        }
+    });
+
+    // Deep links from the dashboard: ?preset=cyrillic or ?keywords=a,b,c open the dialog prefilled
+    if ($modal.length) {
+        const params = new URLSearchParams(window.location.search);
+        const preset = params.get('preset');
+        const keywords = params.get('keywords');
+        if (preset && ulticoclData.presets[preset]) {
+            fillRuleForm(ulticoclData.presets[preset], __('New Smart Rule', td));
+        } else if (keywords) {
+            fillRuleForm({
+                name: __('Spam words', td),
+                keywords: keywords.split(',').map(function(word) { return word.trim(); }).filter(Boolean).slice(0, 50)
+            }, __('New Smart Rule', td));
+        }
+    }
+
+    function doneText(action, n) {
+        const count = n.toLocaleString();
+        if (action === 'delete') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Deleted %s comment.', 'Deleted %s comments.', n, td), count);
+        }
+        if (action === 'spam') {
+            /* translators: %s: number of comments */
+            return sprintf(_n('Marked %s comment as spam.', 'Marked %s comments as spam.', n, td), count);
+        }
+        /* translators: %s: number of comments */
+        return sprintf(_n('Moved %s comment to quarantine.', 'Moved %s comments to quarantine.', n, td), count);
+    }
+
+    // Scan existing comments with a rule in batches, showing progress. dry = test only.
+    function scanRule(payload, dry, ruleName, action) {
+        const totals = { scanned: 0, matched: 0, acted: 0, total: 0, samples: [] };
+        $result.show().empty().append($('<p>').text(__('Starting...', td)));
+        $result[0].scrollIntoView({ behavior: 'smooth', block: 'nearest' });
+
+        function progress() {
+            const pct = totals.total ? Math.min(100, Math.round(100 * totals.scanned / totals.total)) : 0;
+            $result.empty().append(
+                $('<p>').text(sprintf(
+                    /* translators: 1: comments checked so far, 2: total comments to check, 3: comments matched so far */
+                    __('Checking... %1$s of %2$s comments, %3$s matched so far', td),
+                    totals.scanned.toLocaleString(), totals.total.toLocaleString(), totals.matched.toLocaleString()
+                )),
+                $('<div>').addClass('ulticocl-progress').append($('<div>').css('width', pct + '%'))
+            );
+        }
+
+        function finish() {
+            $result.empty();
+            if (dry) {
+                $result.append($('<p>').append($('<strong>').text(sprintf(
+                    /* translators: 1: comments matched, 2: comments checked, 3: rule name */
+                    __('Test finished: %1$s of %2$s existing comments match "%3$s". Nothing was changed.', td),
+                    totals.matched.toLocaleString(), totals.scanned.toLocaleString(), ruleName
+                ))));
+                if (totals.scanned >= 10 && totals.matched / totals.scanned >= 0.5) {
+                    $result.append($('<p>').addClass('ulticocl-error').text(
+                        __('This rule matches a very large share of your comments. Check its keywords before running it.', td)
+                    ));
+                }
+                if (totals.samples.length) {
+                    const list = $('<ul>').addClass('ulticocl-samples');
+                    totals.samples.forEach(function(s) {
+                        list.append($('<li>').append(
+                            $('<strong>').text(s.author || '—'),
+                            document.createTextNode(': ' + s.excerpt + ' '),
+                            $('<em>').text('(' + s.reason + ')')
+                        ));
+                    });
+                    $result.append(list);
+                }
+                if (totals.matched > 0) {
+                    $result.append($('<p>').append($('<a>', {
+                        href: ulticoclData.reviewUrl,
+                        'class': 'button button-primary',
+                        text: __('Review these comments', td)
+                    })));
+                }
+            } else {
+                $result.append($('<p>').append($('<strong>').text(doneText(action, totals.acted))));
+                $result.append($('<p>').append($('<a>', { href: window.location.href, text: __('Refresh the list', td) })));
+            }
+        }
+
+        function step(cursor) {
+            post($.extend({
+                action: 'ulticocl_scan_rule',
+                dry: dry ? 1 : 0,
+                cursor: cursor,
+                acted_so_far: totals.acted
+            }, payload)).done(function(response) {
+                if (!response.success) {
+                    $result.empty().append($('<p>').addClass('ulticocl-error').text(errorMessage(response)));
+                    return;
+                }
+                const d = response.data;
+                totals.scanned += d.scanned;
+                totals.matched += d.matched;
+                totals.acted += d.acted;
+                totals.samples = totals.samples.concat(d.samples).slice(0, 5);
+                if (d.total !== undefined) {
+                    totals.total = d.total;
+                }
+                if (d.done) {
+                    finish();
+                } else {
+                    progress();
+                    step(d.cursor);
+                }
+            }).fail(function() {
+                $result.empty().append($('<p>').addClass('ulticocl-error').text(__('An error occurred. Please try again.', td)));
             });
-        }, 30000);
-    }
-    
-    function updateStats(stats) {
-        // Update stat cards
-        $('.remove-comments-stat-card').each(function() {
-            const label = $(this).find('.remove-comments-stat-label').text().trim();
-            let value = 0;
-            
-            if (label.includes('Total')) value = stats.total;
-            else if (label.includes('Approved')) value = stats.approved;
-            else if (label.includes('Pending')) value = stats.pending;
-            else if (label.includes('Spam')) value = stats.spam;
-            else if (label.includes('Trash')) value = stats.trash;
-            else if (label.includes('Triggers')) value = stats.triggers;
-            
-            $(this).find('.remove-comments-stat-value').text(value.toLocaleString());
-        });
-    }
-    
+        }
+
+        step(0);
+    }
+
+    // Test the rule currently in the form, without saving it
+    $('#ulticocl-test-form').on('click', function() {
+        const payload = rulePayload();
+        $modal.hide();
+        scanRule(payload, true, payload.name);
+    });
+
+    // Test or run a saved rule from the list
+    $(document).on('click', '.ulticocl-scan-saved', function() {
+        const button = $(this);
+        const dry = String(button.data('dry')) === '1';
+        const name = button.closest('.ulticocl-rule').find('h3').text();
+        const action = button.data('action');
+        if (!dry) {
+            const messages = {
+                quarantine: __('Run this rule now? Matching comments will be moved to quarantine.', td),
+                spam: __('Run this rule now? Matching comments will be marked as spam.', td),
+                'delete': __('Run this rule now? Matching comments will be permanently deleted.', td)
+            };
+            if (!confirm(messages[action] || messages.quarantine)) {
+                return;
+            }
+        }
+        scanRule({ rule_id: button.data('id') }, dry, name, action);
+    });
+
+    // ---------------------------------------------------------------------
+    // Comment lists: confirm permanent deletes
+    // ---------------------------------------------------------------------
+
+    $(document).on('click', '.remove-comments-comments-panel a.submitdelete', function(e) {
+        if (!confirm(__('Permanently delete this comment? This cannot be undone.', td))) {
+            e.preventDefault();
+        }
+    });
+
+    $('.remove-comments-comments-panel form[method="post"]').on('submit', function(e) {
+        const form = $(this);
+        const selected = form.find('input[name="ids[]"]:checked').length;
+        const action = [form.find('select[name="action"]').val(), form.find('select[name="action2"]').val()].filter(function(v) {
+            return v && v !== '-1';
+        })[0];
+        if (action === 'delete' && selected > 0 && !confirm(sprintf(
+            /* translators: %s: number of comments */
+            _n('Permanently delete %s comment? This cannot be undone.', 'Permanently delete %s comments? This cannot be undone.', selected, td),
+            selected.toLocaleString()
+        ))) {
+            e.preventDefault();
+        }
+    });
+
+    // ---------------------------------------------------------------------
+    // Dashboard, filters and settings
+    // ---------------------------------------------------------------------
+
     // Checkbox group handling
     $('input[name="status[]"]').on('change', function() {
+        if (!$(this).closest('#remove-comments-delete-form').length) {
+            return;
+        }
         if ($(this).val() === 'all' && $(this).is(':checked')) {
             $('input[name="status[]"]').not(this).prop('checked', false);
@@ -337 +628 @@
         }
     });
-    
+
     $('input[name="post_type[]"]').on('change', function() {
         if ($(this).val() === 'all' && $(this).is(':checked')) {
@@ -345 +636 @@
         }
     });
-    
+
     // Toggle email field visibility based on notification checkbox
     $('input[name="send_email_notifications"]').on('change', function() {
@@ -354 +645 @@
         }
     });
-    
+
     // Settings Form - Use AJAX for better UX
     $('#remove-comments-settings-form').on('submit', function(e) {
         e.preventDefault();
-        
+
         const notificationEmail = $('#rc_notification_email').val();
         if ($('input[name="send_email_notifications"]').is(':checked') && (!notificationEmail || !notificationEmail.trim())) {
-            showAlert('Please enter an email address for notifications.', 'error');
+            showAlert(__('Please enter an email address for notifications.', td), 'error');
             return;
         }
-        
-        const formData = {
+
+        const submitButton = $(this).find('button[type="submit"]');
+        const originalText = submitButton.text();
+        submitButton.prop('disabled', true).text(__('Saving...', td));
+
+        post({
             action: 'ulticocl_save_settings',
-            nonce: ulticoclData.nonce,
             enable_logging: $('input[name="enable_logging"]').is(':checked') ? 1 : 0,
             send_email_notifications: $('input[name="send_email_notifications"]').is(':checked') ? 1 : 0,
-            notification_email: notificationEmail
-        };
-        
-        const submitButton = $(this).find('button[type="submit"]');
-        const originalText = submitButton.text();
-        
-        $.ajax({
-            url: ulticoclData.ajaxurl,
-            type: 'POST',
-            data: formData,
-            beforeSend: function() {
-                submitButton.prop('disabled', true).text('Saving...');
-            },
-            success: function(response) {
-                if (response.success) {
-                    showAlert(response.data.message || 'Settings have been saved successfully.', 'success');
-                    // Reload to show updated settings and notice
-                    setTimeout(function() {
-                        const url = new URL(window.location.href);
-                        url.searchParams.set('tab', 'settings');
-                        url.searchParams.set('settings-updated', 'true');
-                        window.location.href = url.toString();
-                    }, 1000);
-                } else {
-                    showAlert(response.data.message || 'An error occurred while saving settings.', 'error');
-                }
-            },
-            error: function() {
-                showAlert('An error occurred while saving settings.', 'error');
-            },
-            complete: function() {
+            notification_email: notificationEmail,
+            quarantine_days: $('#ulticocl_quarantine_days').val(),
+            allowlist: $('#ulticocl_allowlist').val()
+        }).done(function(response) {
+            if (response.success) {
+                // Reload to show updated settings and notice
+                const url = new URL(window.location.href);
+                url.searchParams.set('tab', 'settings');
+                url.searchParams.set('settings-updated', 'true');
+                window.location.href = url.toString();
+            } else {
+                showAlert(errorMessage(response), 'error');
                 submitButton.prop('disabled', false).text(originalText);
             }
+        }).fail(function() {
+            showAlert(__('An error occurred while saving settings.', td), 'error');
+            submitButton.prop('disabled', false).text(originalText);
         });
     });

ultimate-comment-cleaner/trunk/readme.txt

@@ -1 +1 @@
 === Ultimate Comment Cleaner ===
 Contributors: wpunicorn
-Tags: delete comments, bulk delete comment, remove comment,stop spam, clean comment
-Requires at least: 5.0
-Tested up to: 6.9
-Stable tag: 1.0.0
+Tags: spam, delete comments, comment cleaner, quarantine, bulk delete
+Requires at least: 5.5
+Tested up to: 7.1
+Requires PHP: 7.4
+Stable tag: 1.1.0
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -10 +11 @@
 Author URI: https://profiles.wordpress.org/wpunicorn/
 
-Bulk delete WordPress comments with advanced filters, triggers, and a modern dashboard. Delete by status, date, author, and more.
+Stop comment spam with smart rules: keywords, Cyrillic/Chinese text, links. Quarantine, review and bulk-clean comments. Restore any mistake.
 
 == Description ==
 
-**Ultimate Comment Cleaner** is a comprehensive WordPress comment management plugin that allows you to efficiently delete comments in bulk with advanced filtering options. Whether you need to clean up spam, remove old comments, or manage comments by specific criteria, this plugin provides all the tools you need.
+**Ultimate Comment Cleaner** catches comment spam by *what it says*, keeps what it catches in a quarantine you can restore from, and gives you a proper screen to search, filter and clean up every comment on your site.
 
-= Key Features =
+Getting hit by Russian gambling spam, Chinese link farms or "buy followers" offers? Pick a ready-made rule, test it against your existing comments to see exactly what it would catch, then switch it on.
 
-* **Creative Dashboard** - Beautiful, modern dashboard with real-time statistics and visual cards
-* **Bulk Delete** - Delete comments by status, date range, post type, author, and more
-* **Advanced Filters** - Filter by URL presence, word count, and custom criteria
-* **Auto Triggers** - Set up automatic deletion rules that run on schedule
-* **Export Functionality** - Export comments to CSV before deletion
-* **Preview Count** - See how many comments match your criteria before deleting
-* **Activity Log** - Track all deletion activities
-* **Real-time Stats** - Live statistics that update automatically
-* **WordPress Standards** - Follows WordPress coding standards and best practices
+= Smart Rules =
 
-= Dashboard Features =
+Rules check **new comments as they arrive** and can clean up **existing comments on a schedule**. A rule can look for:
 
-* Visual stat cards showing comment counts by status
-* Total comments, approved, pending, spam, and trash counts
-* Active triggers counter
-* Recent activity log
-* Quick action buttons
+* **Keywords and phrases** - whole word (`casino`), word start (`casino*`), anywhere (`*casino*`) or a regular expression. English, Russian and any other language.
+* **Writing system** - flag comments written mostly in Cyrillic, Chinese, Japanese, Korean, Arabic, Thai, Hebrew, Hindi or Greek.
+* **Links** - comments with N or more links, or a website filled in.
+* **Short comments** - fewer than N words. Combine with "ALL" for rules such as "short comment with a link".
+* **Where to look** - comment text, name, email or website.
+* **Status and age** - for existing comments, such as "pending comments older than 30 days".
 
-= Bulk Delete Options =
+Ready-made rules to start from: Russian/Cyrillic text, Gambling spam (English and Russian), Chinese/Japanese/Korean text, Link stuffing, Short comment with a link, Pharmacy spam, Crypto and get-rich-quick, SEO and promotion spam, Adult content.
 
-* Filter by status (All, Approved, Pending, Spam, Trash)
-* Date range filtering
-* Post type filtering
-* Author filtering
-* Comments with/without URLs
-* Short comments (less than 10 words)
-* Custom word count range (min/max words)
-* Preview count before deletion
-* Export to CSV
+What a rule does when it matches is up to you: **move to quarantine** (recommended), **mark as spam** or **delete permanently**.
 
-= Auto Triggers =
+= Test before you trust it =
 
-* Create automatic deletion rules
-* Schedule: hourly, daily, or weekly
-* Filter by status and age (older than X days)
-* Enable/disable individually
-* View execution history
+Every rule has a **Test on existing comments** button. It shows how many comments would match, a sample of them and why, and changes nothing. One click opens the matches in the comment list, where you can approve, spam, quarantine or delete them individually or in bulk.
+
+= Quarantine =
+
+Caught comments are hidden from your site but not lost. The Quarantine screen shows which rule caught each comment and why, lets you **restore** or delete them, and removes them automatically after the number of days you choose. A comment you restore is never caught by your rules again.
+
+= Dashboard =
+
+See what is happening at a glance. Stat tiles with trends, comments per day by status, how many comments your rules stopped, when spam arrives, and which writing systems, websites and words show up in spam. A rule performance table shows how many comments each rule caught and how often you had to restore them, and plain-language suggestions point out what needs attention. Switch between the last 7, 30 and 90 days. Every chart has a table view, and nothing is loaded from outside your site.
+
+= Manage Comments =
+
+A full comment list inside the plugin: search by text, name, email, website or IP, filter by links, website and date, see spam signals under each comment (links, writing system), and approve, unapprove, mark as spam, quarantine, edit or delete in bulk.
+
+= Bulk Clean =
+
+Delete, mark as spam or quarantine comments in bulk with filters for status, date range, post type, author, search text, links and word count. Preview the count first. Large clean-ups run in batches with a progress counter, so they do not time out. Export matching comments to CSV before you delete.
+
+= Built to be safe =
+
+* Quarantine is the default action, and everything in it can be restored.
+* Rules that could match every comment are refused.
+* Comments by moderators and administrators are never touched. Add trusted email addresses or domains to the allowlist.
+* Only real comments, pingbacks and trackbacks are managed. WooCommerce reviews and order notes are left alone.
+* Confirmations show the exact number of comments before anything permanent happens.
 
 == Installation ==
@@ -64 +70 @@
 == Frequently Asked Questions ==
 
-= How do I delete all spam comments? =
+= How do I stop Russian gambling spam? =
 
-Go to **Tools → Ultimate Comment Cleaner → Bulk Delete**, select "Spam" in the status filter, and click "Delete Comments".
+Go to **Tools → Ultimate Comment Cleaner → Smart Rules** and click **Gambling spam** (keywords in English and Russian). Click **Test on existing comments** to see what it would catch, then **Save Rule**. For comments written in Russian generally, also add **Russian / Cyrillic text**.
 
-= Can I preview how many comments will be deleted? =
+= What happens to a comment a rule catches? =
 
-Yes! Use the "Preview Count" button to see how many comments match your criteria before deleting.
+By default it is moved to quarantine: hidden from your site and from the normal comment screen, but kept so you can restore it. Choose "Mark as spam" or "Delete permanently" per rule if you prefer.
 
-= How do I set up automatic spam cleanup? =
+= Can a rule catch good comments by mistake? =
 
-Go to **Tools → Ultimate Comment Cleaner → Auto Triggers**, click "Add New Trigger", set the status to "Spam", choose a schedule, and enable it.
+It can, which is why rules default to quarantine and have a test button. Restore a good comment from the Quarantine tab and it is never caught by your rules again. You can also add trusted email addresses or domains to the allowlist in Settings.
+
+= Does it check new comments or only old ones? =
+
+Both. Each rule can apply to new comments as they arrive, to existing comments on an hourly, daily or weekly schedule, or to both.
+
+= How long do quarantined comments stay? =
+
+14 days by default. Change it in **Settings**, or set 0 to keep them until you delete them.
+
+= Does it work with Akismet? =
+
+Yes. Comments Akismet already marks as spam are left to Akismet. Your rules add extra checks on top, such as keywords and writing systems.
+
+= Where did my quarantined comments go if I deactivate the plugin? =
+
+Quarantined comments stay hidden while the plugin is deactivated. Reactivate it to see them again. If you delete the plugin, they are handed back to WordPress as spam.
+
+= I used Auto Triggers in version 1.0. What happened to them? =
+
+They are imported as Smart Rules that delete exactly as before. A trigger that had no age limit (and so could have deleted every approved or pending comment) is imported switched off. Review it under Smart Rules.
+
+= Can I preview how many comments will be affected? =
+
+Yes. Bulk Clean has a "Preview Count" button, rules have a "Test on existing comments" button, and every confirmation shows the exact number.
 
 = Can I export comments before deleting them? =
 
-Yes! Use the "Export Selected" or "Export All Comments" buttons to download comments as a CSV file.
+Yes. Use "Export Selected" or "Export All Comments" to download comments as a CSV file.
 
 = What permissions are required? =
 
 You need the `manage_options` capability (typically Administrator role) to use this plugin.
-
-= Why are some comments left behind after deletion? =
-
-This has been fixed in version 1.0.0. The plugin now uses WordPress's `wp_delete_comment()` function which properly cleans up all comment data including meta and post counts.
 
 == Screenshots ==
@@ -96 +122 @@
 
 == Changelog ==
+
+= 1.1.0 =
+* New: Smart Rules - catch spam by keywords, writing system (Cyrillic, Chinese, Japanese, Korean and more), links, website and comment length, on new comments and on existing ones
+* New: nine ready-made rules, including Russian/Cyrillic text and Gambling spam in English and Russian
+* New: test any rule on your existing comments before using it, then review the matches in the comment list
+* New: Quarantine - caught comments are hidden but restorable, and are deleted automatically after the number of days you set
+* New: Manage Comments - search, filter, edit and bulk-manage all comments inside the plugin
+* New: redesigned dashboard with trend charts, spam insights, rule accuracy and suggestions for the last 7, 30 or 90 days
+* New: Bulk Clean can quarantine, mark as spam or delete, and can search by text
+* New: allowlist of trusted email addresses and domains that rules never touch
+* New: confirmations for permanent deletes in the comment lists
+* Change: "Auto Triggers" are now Smart Rules; existing triggers are imported automatically
+* Fix: Creating a new auto trigger no longer overwrites the previous one
+* Fix: "Export Selected" now exports only the comments matching your filters, including word-count filters
+* Fix: Activity logging and email notifications can now be turned off
+* Fix: Scheduled rules no longer drift on sites with a non-UTC timezone
+* Fix: Clicking outside the rule dialog now closes it
+* Safety: Invalid or missing filters now match nothing instead of all comments
+* Safety: Rules that would match every comment are refused
+* Safety: Exported CSV cells are protected against spreadsheet formula injection
+* Improvement: Bulk actions run in batches with a progress counter, so large clean-ups no longer time out
+* Improvement: Confirmation shows the exact number of comments affected
+* Improvement: Faster deletion (deferred comment counting, no site-wide cache flush)
+* Improvement: Large exports are streamed in chunks to save memory
+* Improvement: All interface messages are now translatable
+* Improvement: Scheduled events are removed on deactivation; plugin data is removed on uninstall
+* Requires WordPress 5.5 and PHP 7.4 or newer
 
 = 1.0.0 =
@@ -111 +164 @@
 == Upgrade Notice ==
 
+= 1.1.0 =
+Big update: Smart Rules catch spam by keywords, language and links, with a restorable quarantine and a full comment manager. Fixes new triggers overwriting each other. Existing triggers are imported as rules.
+
 = 1.0.0 =
 Initial release of Ultimate Comment Cleaner. Install to start managing your comments efficiently!

ultimate-comment-cleaner/trunk/ultimate-comment-cleaner.php

@@ -3 +3 @@
  * Plugin Name: Ultimate Comment Cleaner
  * Plugin URI: https://wordpress.org/plugins/ultimate-comment-cleaner/
- * Description: A powerful WordPress plugin to bulk delete comments with advanced filters, triggers, and a beautiful creative dashboard. Delete comments by status, date range, author, post type, and more.
- * Version: 1.0.0
+ * Description: Stop comment spam with smart rules (keywords, writing system, links), a restorable quarantine, a full comment manager and bulk clean-up tools.
+ * Version: 1.1.0
  * Author: wpunicorn
  * Author URI: https://profiles.wordpress.org/wpunicorn/
@@ -10 +10 @@
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
  * Text Domain: ultimate-comment-cleaner
- * Requires at least: 5.0
- * Tested up to: 6.9
+ * Requires at least: 5.5
+ * Requires PHP: 7.4
+ * Tested up to: 7.1
  */
 
@@ -25 +26 @@
  */
 if (!defined('ULTICOCL_PLUGIN_VERSION')) {
-    define('ULTICOCL_PLUGIN_VERSION', '1.0.0');
+    define('ULTICOCL_PLUGIN_VERSION', '1.1.0');
 }
 if (!defined('ULTICOCL_PLUGIN_DIR')) {
@@ -37 +38 @@
 }
 
+require_once ULTICOCL_PLUGIN_DIR . 'includes/class-ulticocl-matcher.php';
+require_once ULTICOCL_PLUGIN_DIR . 'includes/class-ulticocl-insights.php';
+
 class ULTICOCL_Plugin {
-    
+
+    /**
+     * Comments handled per request / per cron batch. Keeps each request well under host time limits.
+     */
+    const BATCH_SIZE = 500;
+
+    /**
+     * Seconds one cron run may spend scanning rules before it carries on next time.
+     */
+    const CRON_BUDGET = 20;
+
+    /**
+     * comment_approved value for quarantined comments. Core ignores unknown statuses,
+     * so quarantined comments stay out of the site, the comment screen and trash handling.
+     */
+    const QUARANTINE = 'ulticocl_quarantine';
+
+    /**
+     * Allowed status filter values mapped to comment_approved column values.
+     */
+    const STATUS_MAP = array(
+        'approved'   => '1',
+        'pending'    => '0',
+        'spam'       => 'spam',
+        'trash'      => 'trash',
+        'quarantine' => self::QUARANTINE,
+    );
+
+    /**
+     * Comment types this plugin manages. Other types (WooCommerce notes, reviews...) are never touched.
+     */
+    const TYPES = array('comment', 'pingback', 'trackback');
+
+    const SCHEDULES = array('hourly', 'daily', 'weekly');
+
+    const COMMENT_ACTIONS = array('approve', 'unapprove', 'spam', 'quarantine', 'restore', 'delete');
+
     private static $instance = null;
-    
+
+    /** @var array|null Rule that flagged the comment currently being inserted: array(id, rule, reason). */
+    private $pending = null;
+
+    /** @var int[] New comments to delete once WordPress has finished inserting them. */
+    private $deferred_deletes = array();
+
     public static function get_instance() {
         if (null === self::$instance) {
@@ -47 +93 @@
         return self::$instance;
     }
-    
+
     private function __construct() {
         $this->init_hooks();
     }
-    
+
     private function init_hooks() {
         add_action('admin_menu', array($this, 'add_admin_menu'));
         add_action('admin_enqueue_scripts', array($this, 'enqueue_scripts'));
-        add_action('wp_ajax_ulticocl_delete_comments', array($this, 'ajax_delete_comments'));
-        add_action('wp_ajax_ulticocl_get_stats', array($this, 'ajax_get_stats'));
+        add_action('wp_ajax_ulticocl_bulk_process', array($this, 'ajax_bulk_process'));
+        add_action('wp_ajax_ulticocl_dashboard', array($this, 'ajax_dashboard'));
         add_action('wp_ajax_ulticocl_export_comments', array($this, 'ajax_export_comments'));
-        add_action('wp_ajax_ulticocl_save_trigger', array($this, 'ajax_save_trigger'));
-        add_action('wp_ajax_ulticocl_delete_trigger', array($this, 'ajax_delete_trigger'));
-        add_action('wp_ajax_ulticocl_get_trigger', array($this, 'ajax_get_trigger'));
+        add_action('wp_ajax_ulticocl_save_rule', array($this, 'ajax_save_rule'));
+        add_action('wp_ajax_ulticocl_delete_rule', array($this, 'ajax_delete_rule'));
+        add_action('wp_ajax_ulticocl_get_rule', array($this, 'ajax_get_rule'));
+        add_action('wp_ajax_ulticocl_scan_rule', array($this, 'ajax_scan_rule'));
         add_action('wp_ajax_ulticocl_preview_count', array($this, 'ajax_preview_count'));
         add_action('wp_ajax_ulticocl_save_settings', array($this, 'ajax_save_settings'));
-        
-        // Handle settings form submission (non-AJAX fallback)
+
+        // Settings form (non-AJAX fallback) and row/bulk actions on the comment lists
         add_action('admin_init', array($this, 'handle_settings_save'));
-        
-        // Scheduled triggers
-        add_action('ulticocl_check_triggers', array($this, 'check_triggers'));
-        if (!wp_next_scheduled('ulticocl_check_triggers')) {
-            wp_schedule_event(time(), 'hourly', 'ulticocl_check_triggers');
-        }
-        
+        add_action('admin_init', array($this, 'handle_comment_actions'));
+
+        // Screen new comments as they arrive
+        add_filter('pre_comment_approved', array($this, 'screen_new_comment'), 20, 2);
+        add_action('comment_post', array($this, 'after_new_comment'), 5);
+
+        add_action('init', array($this, 'maybe_upgrade'), 1);
+
+        // Scheduled rule runs and quarantine clean-up
+        add_action('ulticocl_run_rules', array($this, 'run_scheduled_rules'));
+        add_action('ulticocl_purge_quarantine', array($this, 'purge_quarantine'));
+        if (!wp_next_scheduled('ulticocl_run_rules')) {
+            wp_schedule_event(time(), 'hourly', 'ulticocl_run_rules');
+        }
+        if (!wp_next_scheduled('ulticocl_purge_quarantine')) {
+            wp_schedule_event(time(), 'daily', 'ulticocl_purge_quarantine');
+        }
+
         // Add settings link to plugins page
         add_filter('plugin_action_links_' . ULTICOCL_PLUGIN_BASENAME, array($this, 'add_plugin_action_links'));
@@ -103 +161 @@
         
         // Enqueue scripts
-        wp_enqueue_script('jquery');
         wp_enqueue_script(
             'ulticocl-admin-script',
             ULTICOCL_PLUGIN_URL . 'assets/js/admin.js',
-            array('jquery'),
+            array('jquery', 'wp-i18n'),
             ULTICOCL_PLUGIN_VERSION,
             true
         );
-        
-        // Note: SweetAlert2 removed - external CDN resources not allowed
-        // Using WordPress native confirmations via JavaScript confirm() instead
-        
-        // Localize script
+        wp_set_script_translations('ulticocl-admin-script', 'ultimate-comment-cleaner');
+
+        $presets = array();
+        foreach (ULTICOCL_Matcher::presets() as $key => $preset) {
+            $presets[$key] = $preset['rule'];
+        }
         wp_localize_script('ulticocl-admin-script', 'ulticoclData', array(
             'ajaxurl' => admin_url('admin-ajax.php'),
             'nonce' => wp_create_nonce('ulticocl_nonce'),
-            'strings' => array(
-                'confirm_delete' => __('Are you sure you want to delete these comments? This action cannot be undone.', 'ultimate-comment-cleaner'),
-                'deleting' => __('Deleting comments...', 'ultimate-comment-cleaner'),
-                'success' => __('Comments deleted successfully!', 'ultimate-comment-cleaner'),
-                'error' => __('An error occurred. Please try again.', 'ultimate-comment-cleaner'),
-            )
+            'presets' => $presets,
+            'ruleDefaults' => ULTICOCL_Matcher::defaults(),
+            'reviewUrl' => add_query_arg(array('page' => 'ultimate-comment-cleaner', 'tab' => 'manage', 'review' => 1), admin_url('tools.php')),
         ));
+
+        // The charts only exist on the dashboard, so only load them there.
+        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab parameter is for navigation only.
+        $tab = isset($_GET['tab']) ? sanitize_key(wp_unslash($_GET['tab'])) : 'dashboard';
+        if ('dashboard' === $tab) {
+            wp_enqueue_style('ulticocl-dashboard-style', ULTICOCL_PLUGIN_URL . 'assets/css/dashboard.css', array('ulticocl-admin-style'), ULTICOCL_PLUGIN_VERSION);
+            wp_enqueue_script('ulticocl-dashboard-script', ULTICOCL_PLUGIN_URL . 'assets/js/dashboard.js', array('ulticocl-admin-script', 'wp-i18n'), ULTICOCL_PLUGIN_VERSION, true);
+            wp_set_script_translations('ulticocl-dashboard-script', 'ultimate-comment-cleaner');
+            // First paint uses this data; the script refreshes it over AJAX. Hex-escaped so it is safe inside a script tag.
+            wp_add_inline_script(
+                'ulticocl-dashboard-script',
+                'window.ulticoclDash = ' . wp_json_encode(ULTICOCL_Insights::collect($this->dashboard_days(), $this->get_comment_stats()), JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT) . ';',
+                'before'
+            );
+        }
     }
     
@@ -134 +204 @@
         
         // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab parameter is for navigation only, not form submission
-        $current_tab = isset($_GET['tab']) ? sanitize_text_field(wp_unslash($_GET['tab'])) : 'dashboard';
-        
+        $current_tab = isset($_GET['tab']) ? sanitize_key(wp_unslash($_GET['tab'])) : 'dashboard';
+        if ('triggers' === $current_tab) {
+            $current_tab = 'rules'; // Old bookmarks from version 1.0.
+        }
+        if (!in_array($current_tab, array('dashboard', 'manage', 'quarantine', 'rules', 'delete', 'settings'), true)) {
+            $current_tab = 'dashboard';
+        }
+        $quarantined = (int) get_comments(array('count' => true, 'status' => self::QUARANTINE));
+        $tabs = array(
+            'dashboard'  => array('dashicons-dashboard', __('Dashboard', 'ultimate-comment-cleaner')),
+            'manage'     => array('dashicons-admin-comments', __('Manage Comments', 'ultimate-comment-cleaner')),
+            'quarantine' => array('dashicons-shield', __('Quarantine', 'ultimate-comment-cleaner')),
+            'rules'      => array('dashicons-filter', __('Smart Rules', 'ultimate-comment-cleaner')),
+            'delete'     => array('dashicons-trash', __('Bulk Clean', 'ultimate-comment-cleaner')),
+            'settings'   => array('dashicons-admin-settings', __('Settings', 'ultimate-comment-cleaner')),
+        );
+
         ?>
         <div class="wrap remove-comments-wrap">
@@ -142 +227 @@
                     <?php echo esc_html__('Ultimate Comment Cleaner', 'ultimate-comment-cleaner'); ?>
                 </h1>
-                <p class="remove-comments-subtitle"><?php echo esc_html__('Advanced comment management with powerful bulk deletion tools', 'ultimate-comment-cleaner'); ?></p>
+                <p class="remove-comments-subtitle"><?php echo esc_html__('Smart rules, quarantine and bulk tools to keep your comments clean', 'ultimate-comment-cleaner'); ?></p>
             </div>
-            
+
             <nav class="remove-comments-tabs">
-                <a href="?page=ultimate-comment-cleaner&tab=dashboard" class="remove-comments-tab <?php echo $current_tab === 'dashboard' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-dashboard"></span>
-                    <?php echo esc_html__('Dashboard', 'ultimate-comment-cleaner'); ?>
-                </a>
-                <a href="?page=ultimate-comment-cleaner&tab=delete" class="remove-comments-tab <?php echo $current_tab === 'delete' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-trash"></span>
-                    <?php echo esc_html__('Bulk Delete', 'ultimate-comment-cleaner'); ?>
-                </a>
-                <a href="?page=ultimate-comment-cleaner&tab=triggers" class="remove-comments-tab <?php echo $current_tab === 'triggers' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-clock"></span>
-                    <?php echo esc_html__('Auto Triggers', 'ultimate-comment-cleaner'); ?>
-                </a>
-                <a href="?page=ultimate-comment-cleaner&tab=settings" class="remove-comments-tab <?php echo $current_tab === 'settings' ? 'active' : ''; ?>">
-                    <span class="dashicons dashicons-admin-settings"></span>
-                    <?php echo esc_html__('Settings', 'ultimate-comment-cleaner'); ?>
-                </a>
+                <?php foreach ($tabs as $slug => $tab) : ?>
+                    <a href="<?php echo esc_url(add_query_arg(array('page' => 'ultimate-comment-cleaner', 'tab' => $slug), admin_url('tools.php'))); ?>" class="remove-comments-tab <?php echo $current_tab === $slug ? 'active' : ''; ?>">
+                        <span class="dashicons <?php echo esc_attr($tab[0]); ?>"></span>
+                        <?php echo esc_html($tab[1]); ?>
+                        <?php if ('quarantine' === $slug && $quarantined > 0) : ?>
+                            <span class="ulticocl-count"><?php echo esc_html(number_format_i18n($quarantined)); ?></span>
+                        <?php endif; ?>
+                    </a>
+                <?php endforeach; ?>
             </nav>
-            
+
             <div class="remove-comments-content">
                 <?php
+                $this->render_notice();
                 switch ($current_tab) {
                     case 'dashboard':
                         $this->render_dashboard_tab();
                         break;
+                    case 'manage':
+                    case 'quarantine':
+                        $this->render_comments_tab($current_tab);
+                        break;
+                    case 'rules':
+                        $this->render_rules_tab();
+                        break;
                     case 'delete':
                         $this->render_delete_tab();
-                        break;
-                    case 'triggers':
-                        $this->render_triggers_tab();
                         break;
                     case 'settings':
@@ -187 +270 @@
     
     private function render_dashboard_tab() {
-        $stats = $this->get_comment_stats();
         ?>
-        <div class="remove-comments-dashboard">
-            <div class="remove-comments-stats-grid">
-                <div class="remove-comments-stat-card remove-comments-stat-primary">
-                    <span class="dashicons dashicons-admin-comments"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Total Comments', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['total']); ?></div>
-                    </div>
+        <div id="ulticocl-dash" class="ulticocl-dash">
+            <div class="ulticocl-filterbar">
+                <div class="ulticocl-seg" id="ulticocl-range" role="group" aria-label="<?php esc_attr_e('Date range', 'ultimate-comment-cleaner'); ?>">
+                    <?php foreach (ULTICOCL_Insights::RANGES as $range) : ?>
+                        <button type="button" data-days="<?php echo (int) $range; ?>" aria-pressed="false">
+                            <?php
+                            /* translators: %d: number of days */
+                            echo esc_html(sprintf(__('Last %d days', 'ultimate-comment-cleaner'), $range));
+                            ?>
+                        </button>
+                    <?php endforeach; ?>
                 </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-success">
-                    <span class="dashicons dashicons-yes-alt"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Approved', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['approved']); ?></div>
-                    </div>
-                </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-warning">
-                    <span class="dashicons dashicons-clock"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Pending', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['pending']); ?></div>
-                    </div>
-                </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-danger">
-                    <span class="dashicons dashicons-warning"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Spam', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['spam']); ?></div>
-                    </div>
-                </div>
-                
-                <div class="remove-comments-stat-card remove-comments-stat-gray">
-                    <span class="dashicons dashicons-trash"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Trash', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['trash']); ?></div>
-                    </div>
-                </div>
-                
-                <a href="?page=ultimate-comment-cleaner&tab=triggers" class="remove-comments-stat-card remove-comments-stat-info remove-comments-stat-clickable">
-                    <span class="dashicons dashicons-admin-settings"></span>
-                    <div class="remove-comments-stat-content">
-                        <div class="remove-comments-stat-label"><?php esc_html_e('Triggers', 'ultimate-comment-cleaner'); ?></div>
-                        <div class="remove-comments-stat-value"><?php echo number_format($stats['triggers']); ?></div>
-                    </div>
-                    <span class="dashicons dashicons-arrow-right-alt remove-comments-stat-arrow"></span>
-                </a>
+                <span class="ulticocl-updated" id="ulticocl-updated" aria-live="polite"></span>
+                <button type="button" class="ulticocl-linkbtn" id="ulticocl-refresh">
+                    <span class="dashicons dashicons-update" aria-hidden="true"></span>
+                    <?php esc_html_e('Refresh', 'ultimate-comment-cleaner'); ?>
+                </button>
+                <span class="ulticocl-filterbar-actions">
+                    <a class="button" href="?page=ultimate-comment-cleaner&tab=manage"><?php esc_html_e('Manage comments', 'ultimate-comment-cleaner'); ?></a>
+                    <a class="button" href="?page=ultimate-comment-cleaner&tab=rules"><?php esc_html_e('Smart Rules', 'ultimate-comment-cleaner'); ?></a>
+                    <button type="button" class="button" id="remove-comments-export-all"><?php esc_html_e('Export all', 'ultimate-comment-cleaner'); ?></button>
+                </span>
             </div>
-            
-            <div class="remove-comments-quick-actions">
-                <h2><?php esc_html_e('Quick Actions', 'ultimate-comment-cleaner'); ?></h2>
-                <div class="remove-comments-action-buttons">
-                    <a href="?page=ultimate-comment-cleaner&tab=delete" class="remove-comments-action-btn remove-comments-btn-danger">
-                        <span class="dashicons dashicons-trash"></span>
-                        <?php esc_html_e('Delete Comments', 'ultimate-comment-cleaner'); ?>
-                    </a>
-                    <a href="?page=ultimate-comment-cleaner&tab=triggers" class="remove-comments-action-btn remove-comments-btn-primary">
-                        <span class="dashicons dashicons-admin-settings"></span>
-                        <?php esc_html_e('Manage Triggers', 'ultimate-comment-cleaner'); ?>
-                    </a>
-                    <button type="button" class="remove-comments-action-btn remove-comments-btn-success" id="remove-comments-export-all">
-                        <span class="dashicons dashicons-download"></span>
-                        <?php esc_html_e('Export All Comments', 'ultimate-comment-cleaner'); ?>
-                    </button>
-                </div>
+
+            <section class="ulticocl-hero" id="ulticocl-hero" aria-labelledby="ulticocl-hero-title"></section>
+            <div class="ulticocl-tiles" id="ulticocl-tiles"></div>
+
+            <h2 class="ulticocl-h"><?php esc_html_e('Trends', 'ultimate-comment-cleaner'); ?></h2>
+            <div class="ulticocl-grid">
+                <?php
+                $this->dash_card('comments', 8, __('Comments over time', 'ultimate-comment-cleaner'), __('New comments per day, by status', 'ultimate-comment-cleaner'), true);
+                $this->dash_card('insights', 4, __('Insights', 'ultimate-comment-cleaner'), __('What needs your attention', 'ultimate-comment-cleaner'));
+                $this->dash_card('status', 4, __('Where comments stand', 'ultimate-comment-cleaner'), __('All comments right now', 'ultimate-comment-cleaner'));
+                $this->dash_card('caught', 8, __('Caught by Smart Rules', 'ultimate-comment-cleaner'), __('Comments stopped per day', 'ultimate-comment-cleaner'), true);
+                ?>
             </div>
-            
-            <div class="remove-comments-recent-activity">
-                <h2><?php esc_html_e('Recent Activity', 'ultimate-comment-cleaner'); ?></h2>
-                <div class="remove-comments-activity-list">
-                    <?php $this->render_recent_activity(); ?>
-                </div>
+
+            <h2 class="ulticocl-h"><?php esc_html_e('Spam intelligence', 'ultimate-comment-cleaner'); ?></h2>
+            <div class="ulticocl-grid">
+                <?php
+                $this->dash_card('hours', 8, __('When spam arrives', 'ultimate-comment-cleaner'), __('Comments by hour of day. Spam in red, everything else in gray.', 'ultimate-comment-cleaner'), true);
+                $this->dash_card('scripts', 4, __('What spam is written in', 'ultimate-comment-cleaner'), __('Writing system of recent spam', 'ultimate-comment-cleaner'));
+                $this->dash_card('sources', 4, __('Where spam comes from', 'ultimate-comment-cleaner'), __('Most common email domains and websites', 'ultimate-comment-cleaner'));
+                $this->dash_card('posts', 4, __('Most targeted posts', 'ultimate-comment-cleaner'), __('Spam received per post', 'ultimate-comment-cleaner'));
+                $this->dash_card('words', 4, __('Words that stand out', 'ultimate-comment-cleaner'), __('Common in spam and not covered by a rule', 'ultimate-comment-cleaner'));
+                ?>
+            </div>
+
+            <h2 class="ulticocl-h"><?php esc_html_e('Automation and activity', 'ultimate-comment-cleaner'); ?></h2>
+            <div class="ulticocl-grid">
+                <?php
+                $this->dash_card('rules', 8, __('Rule performance', 'ultimate-comment-cleaner'), __('Comments caught in this period, and how often you restored them', 'ultimate-comment-cleaner'));
+                $this->dash_card('automation', 4, __('Automation', 'ultimate-comment-cleaner'), __('What is running on its own', 'ultimate-comment-cleaner'));
+                $this->dash_card('latest', 6, __('Latest caught', 'ultimate-comment-cleaner'), __('Newest comments in quarantine', 'ultimate-comment-cleaner'));
+                $this->dash_card('activity', 6, __('Recent activity', 'ultimate-comment-cleaner'), __('Clean-ups, rule runs and settings changes', 'ultimate-comment-cleaner'));
+                ?>
             </div>
         </div>
         <?php
     }
-    
+
+    /**
+     * A small on/off switch in the brand colour. It is a real checkbox, so it submits and
+     * is read exactly like one; only the look differs.
+     */
+    private function mini_toggle($name, $value, $label, $id = '', $checked = false, $title = '') {
+        ?>
+        <label class="ulticocl-toggle"<?php echo '' !== $title ? ' title="' . esc_attr($title) . '"' : ''; ?>>
+            <span class="remove-comments-toggle-switch ulticocl-mini">
+                <input type="checkbox" name="<?php echo esc_attr($name); ?>" value="<?php echo esc_attr($value); ?>"<?php echo '' !== $id ? ' id="' . esc_attr($id) . '"' : ''; ?> <?php checked($checked); ?>>
+                <span class="remove-comments-toggle-slider"></span>
+            </span>
+            <span class="ulticocl-toggle-label"><?php echo esc_html($label); ?></span>
+        </label>
+        <?php
+    }
+
+    /**
+     * One dashboard card. The dashboard script fills its body from the insights data.
+     */
+    private function dash_card($slot, $span, $title, $subtitle = '', $table_toggle = false) {
+        ?>
+        <section class="ulticocl-card ulticocl-span-<?php echo (int) $span; ?>" data-card="<?php echo esc_attr($slot); ?>">
+            <header class="ulticocl-card-head">
+                <div>
+                    <h3><?php echo esc_html($title); ?></h3>
+                    <?php if ('' !== $subtitle) : ?>
+                        <p class="ulticocl-sub"><?php echo esc_html($subtitle); ?></p>
+                    <?php endif; ?>
+                </div>
+                <?php if ($table_toggle) : ?>
+                    <div class="ulticocl-seg ulticocl-seg-small" role="group" aria-label="<?php esc_attr_e('View', 'ultimate-comment-cleaner'); ?>" data-toggle="<?php echo esc_attr($slot); ?>">
+                        <button type="button" data-view="chart" aria-pressed="true"><?php esc_html_e('Chart', 'ultimate-comment-cleaner'); ?></button>
+                        <button type="button" data-view="table" aria-pressed="false"><?php esc_html_e('Table', 'ultimate-comment-cleaner'); ?></button>
+                    </div>
+                <?php endif; ?>
+            </header>
+            <div class="ulticocl-card-body" data-slot="<?php echo esc_attr($slot); ?>"></div>
+        </section>
+        <?php
+    }
+
+    /**
+     * Date range the dashboard opens with: the last one this user picked.
+     */
+    private function dashboard_days() {
+        $days = (int) get_user_meta(get_current_user_id(), 'ulticocl_dash_days', true);
+        return in_array($days, ULTICOCL_Insights::RANGES, true) ? $days : 30;
+    }
+
     private function render_delete_tab() {
         $post_types = get_post_types(array('public' => true), 'objects');
@@ -275 +387 @@
         <div class="remove-comments-delete-panel">
             <div class="remove-comments-panel-header">
-                <h2><?php esc_html_e('Bulk Delete Comments', 'ultimate-comment-cleaner'); ?></h2>
-                <p><?php esc_html_e('Select filters to find and delete comments matching your criteria', 'ultimate-comment-cleaner'); ?></p>
+                <h2><?php esc_html_e('Bulk Clean Comments', 'ultimate-comment-cleaner'); ?></h2>
+                <p><?php esc_html_e('Select filters, then quarantine, mark as spam or delete everything that matches. Quarantined comments can be restored.', 'ultimate-comment-cleaner'); ?></p>
             </div>
             
@@ -318 +430 @@
                             <span class="remove-comments-toggle-label"><?php esc_html_e('Trash', 'ultimate-comment-cleaner'); ?></span>
                         </label>
+                        <label>
+                            <div class="remove-comments-toggle-switch">
+                                <input type="checkbox" name="status[]" value="quarantine">
+                                <span class="remove-comments-toggle-slider"></span>
+                            </div>
+                            <span class="remove-comments-toggle-label"><?php esc_html_e('Quarantine', 'ultimate-comment-cleaner'); ?></span>
+                        </label>
                     </div>
                 </div>
-                
+
+                <div class="remove-comments-form-section">
+                    <h3><?php esc_html_e('Search Text', 'ultimate-comment-cleaner'); ?></h3>
+                    <input type="search" name="search" id="remove-comments-search" class="remove-comments-form-input" placeholder="<?php esc_attr_e('Word or phrase in the comment, name, email or website', 'ultimate-comment-cleaner'); ?>">
+                </div>
+
                 <div class="remove-comments-form-section">
                     <h3><?php esc_html_e('Filter by Date Range', 'ultimate-comment-cleaner'); ?></h3>
@@ -377 +501 @@
                 <div class="remove-comments-form-section">
                     <h3><?php esc_html_e('Additional Filters', 'ultimate-comment-cleaner'); ?></h3>
-                    <div class="remove-comments-advanced-filters">
-                        <label>
-                            <div class="remove-comments-toggle-switch">
-                                <input type="checkbox" name="has_url">
-                                <span class="remove-comments-toggle-slider"></span>
-                            </div>
-                            <span class="remove-comments-toggle-label"><?php esc_html_e('Comments with URL only', 'ultimate-comment-cleaner'); ?></span>
-                        </label>
-                        <label>
-                            <div class="remove-comments-toggle-switch">
-                                <input type="checkbox" name="no_url">
-                                <span class="remove-comments-toggle-slider"></span>
-                            </div>
-                            <span class="remove-comments-toggle-label"><?php esc_html_e('Comments without URL', 'ultimate-comment-cleaner'); ?></span>
-                        </label>
-                        <label>
-                            <div class="remove-comments-toggle-switch">
-                                <input type="checkbox" name="short_comments">
-                                <span class="remove-comments-toggle-slider"></span>
-                            </div>
-                            <span class="remove-comments-toggle-label"><?php esc_html_e('Short comments (less than 10 words)', 'ultimate-comment-cleaner'); ?></span>
-                        </label>
-                        <label>
-                            <input type="number" name="min_words" placeholder="<?php esc_html_e('Minimum words', 'ultimate-comment-cleaner'); ?>" min="0">
-                        </label>
-                        <label>
-                            <input type="number" name="max_words" placeholder="<?php esc_html_e('Maximum words', 'ultimate-comment-cleaner'); ?>" min="0">
-                        </label>
+                    <div class="ulticocl-toggle-grid" data-cols="3">
+                        <?php
+                        $this->mini_toggle('has_url', '1', __('Comments with URL only', 'ultimate-comment-cleaner'));
+                        $this->mini_toggle('no_url', '1', __('Comments without URL', 'ultimate-comment-cleaner'));
+                        $this->mini_toggle('short_comments', '1', __('Short comments (under 10 words)', 'ultimate-comment-cleaner'));
+                        ?>
+                    </div>
+                    <div class="ulticocl-grid-2 ulticocl-row-after-toggles">
+                        <div class="remove-comments-form-group">
+                            <label for="ulticocl-min-words"><?php esc_html_e('Minimum words', 'ultimate-comment-cleaner'); ?></label>
+                            <input type="number" name="min_words" id="ulticocl-min-words" min="0" placeholder="0">
+                        </div>
+                        <div class="remove-comments-form-group">
+                            <label for="ulticocl-max-words"><?php esc_html_e('Maximum words', 'ultimate-comment-cleaner'); ?></label>
+                            <input type="number" name="max_words" id="ulticocl-max-words" min="0" placeholder="0">
+                        </div>
                     </div>
                 </div>
-                
-                <div class="remove-comments-form-actions">
-                    <button type="button" id="remove-comments-preview-count" class="remove-comments-btn remove-comments-btn-secondary">
-                        <?php esc_html_e('Preview Count', 'ultimate-comment-cleaner'); ?>
+
+                <div class="remove-comments-form-section">
+                    <h3><?php esc_html_e('What to do with matching comments', 'ultimate-comment-cleaner'); ?></h3>
+                    <select name="clean_action" id="remove-comments-clean-action" class="remove-comments-select">
+                        <option value="quarantine"><?php esc_html_e('Move to quarantine (can be restored)', 'ultimate-comment-cleaner'); ?></option>
+                        <option value="spam"><?php esc_html_e('Mark as spam', 'ultimate-comment-cleaner'); ?></option>
+                        <option value="delete"><?php esc_html_e('Delete permanently', 'ultimate-comment-cleaner'); ?></option>
+                    </select>
+                    <p class="description" id="ulticocl-action-help"></p>
+                </div>
+
+                <div class="remove-comments-form-actions ulticocl-form-footer">
+                    <button type="button" id="remove-comments-preview-count" class="ulticocl-rbtn">
+                        <span class="dashicons dashicons-visibility" aria-hidden="true"></span><span class="ulticocl-btn-label"><?php esc_html_e('Preview Count', 'ultimate-comment-cleaner'); ?></span>
                     </button>
-                    <button type="submit" id="remove-comments-delete-btn" class="remove-comments-btn remove-comments-btn-danger">
-                        <span class="dashicons dashicons-trash"></span>
-                        <?php esc_html_e('Delete Comments', 'ultimate-comment-cleaner'); ?>
+                    <button type="button" id="remove-comments-export-btn" class="ulticocl-rbtn">
+                        <span class="dashicons dashicons-download" aria-hidden="true"></span><span class="ulticocl-btn-label"><?php esc_html_e('Export Selected', 'ultimate-comment-cleaner'); ?></span>
                     </button>
-                    <button type="button" id="remove-comments-export-btn" class="remove-comments-btn remove-comments-btn-success">
-                        <span class="dashicons dashicons-download"></span>
-                        <?php esc_html_e('Export Selected', 'ultimate-comment-cleaner'); ?>
+                    <button type="submit" id="remove-comments-delete-btn" class="ulticocl-add-btn ulticocl-apply" data-action="quarantine">
+                        <span class="dashicons dashicons-yes" aria-hidden="true"></span><span class="ulticocl-btn-label"><?php esc_html_e('Apply to Matching Comments', 'ultimate-comment-cleaner'); ?></span>
                     </button>
                 </div>
-                
+
                 <div id="remove-comments-preview-result" class="remove-comments-preview-result" style="display:none;"></div>
             </form>
@@ -428 +548 @@
     }
     
-    private function render_triggers_tab() {
-        $triggers = get_option('ulticocl_triggers', array());
+    private function render_rules_tab() {
+        $rules = $this->get_rules();
+        $state = get_option('ulticocl_rule_state', array());
+        $scripts = ULTICOCL_Matcher::scripts();
+        $actions = $this->action_labels();
+        $scopes = array(
+            'new'      => __('New comments', 'ultimate-comment-cleaner'),
+            'existing' => __('Existing comments', 'ultimate-comment-cleaner'),
+            'both'     => __('New and existing comments', 'ultimate-comment-cleaner'),
+        );
         ?>
         <div class="remove-comments-triggers-panel">
             <div class="remove-comments-panel-header">
-                <h2><?php esc_html_e('Auto Delete Triggers', 'ultimate-comment-cleaner'); ?></h2>
-                <p><?php esc_html_e('Set up automatic triggers to find and delete comments based on conditions', 'ultimate-comment-cleaner'); ?></p>
+                <h2><?php esc_html_e('Smart Rules', 'ultimate-comment-cleaner'); ?></h2>
+                <p><?php esc_html_e('Catch spam by what it says. Rules check new comments as they arrive and can clean up existing ones on a schedule. Quarantined comments can always be restored.', 'ultimate-comment-cleaner'); ?></p>
             </div>
-            
-            <button type="button" id="remove-comments-add-trigger" class="remove-comments-btn remove-comments-btn-primary">
-                <span class="dashicons dashicons-plus"></span>
-                <?php esc_html_e('Add New Trigger', 'ultimate-comment-cleaner'); ?>
-            </button>
-            
-            <div id="remove-comments-triggers-list" class="remove-comments-triggers-list">
-                <?php if (empty($triggers)): ?>
+
+            <div class="ulticocl-rules-toolbar">
+                <div class="ulticocl-presets">
+                    <strong class="ulticocl-presets-title"><?php esc_html_e('Quick start', 'ultimate-comment-cleaner'); ?></strong>
+                    <div class="ulticocl-presets-viewport" id="ulticocl-presets">
+                        <div class="ulticocl-presets-track">
+                            <?php foreach (ULTICOCL_Matcher::presets() as $key => $preset) : ?>
+                                <button type="button" class="ulticocl-preset" data-preset="<?php echo esc_attr($key); ?>" title="<?php echo esc_attr($preset['description']); ?>">
+                                    <span class="dashicons dashicons-<?php echo esc_attr($preset['icon']); ?>" aria-hidden="true"></span>
+                                    <span><?php echo esc_html($preset['label']); ?></span>
+                                </button>
+                            <?php endforeach; ?>
+                        </div>
+                    </div>
+                </div>
+                <button type="button" id="ulticocl-add-rule" class="ulticocl-add-btn">
+                    <span class="dashicons dashicons-plus" aria-hidden="true"></span>
+                    <?php esc_html_e('Add New Rule', 'ultimate-comment-cleaner'); ?>
+                </button>
+            </div>
+
+            <div id="ulticocl-scan-result" class="ulticocl-scan-result" style="display:none;" role="status" aria-live="polite"></div>
+
+            <div id="ulticocl-rules-list" class="remove-comments-triggers-list">
+                <?php if (empty($rules)) : ?>
                     <div class="remove-comments-empty-state">
-                        <p><?php esc_html_e('No triggers configured. Click "Add New Trigger" to create one.', 'ultimate-comment-cleaner'); ?></p>
+                        <p><?php esc_html_e('No rules yet. Pick a Quick start above or click "Add New Rule".', 'ultimate-comment-cleaner'); ?></p>
                     </div>
-                <?php else: ?>
-                    <?php foreach ($triggers as $id => $trigger): ?>
-                        <div class="remove-comments-trigger-item" data-trigger-id="<?php echo esc_attr($id); ?>">
-                            <div class="remove-comments-trigger-header">
-                                <h3><?php echo esc_html($trigger['name']); ?></h3>
-                                <div class="remove-comments-trigger-status">
-                                    <span class="remove-comments-status-badge <?php echo $trigger['active'] ? 'active' : 'inactive'; ?>">
-                                        <?php echo $trigger['active'] ? esc_html__('Active', 'ultimate-comment-cleaner') : esc_html__('Inactive', 'ultimate-comment-cleaner'); ?>
+                <?php else : ?>
+                    <?php foreach ($rules as $id => $rule) : ?>
+                        <?php
+                        $st = isset($state[$id]) ? $state[$id] : array();
+                        $last = !empty($st['last_run']) ? wp_date(get_option('date_format') . ' ' . get_option('time_format'), (int) $st['last_run']) : __('Not yet', 'ultimate-comment-cleaner');
+                        ?>
+                        <article class="ulticocl-rule" data-rule-id="<?php echo esc_attr($id); ?>">
+                            <header class="ulticocl-rule-head">
+                                <h3><?php echo esc_html($rule['name']); ?></h3>
+                                <div class="ulticocl-rule-badges">
+                                    <span class="ulticocl-badge ulticocl-badge-action-<?php echo esc_attr($rule['action']); ?>"><?php echo esc_html($actions[$rule['action']]); ?></span>
+                                    <span class="ulticocl-badge <?php echo $rule['active'] ? 'ulticocl-badge-on' : 'ulticocl-badge-off'; ?>">
+                                        <?php echo $rule['active'] ? esc_html__('Active', 'ultimate-comment-cleaner') : esc_html__('Inactive', 'ultimate-comment-cleaner'); ?>
                                     </span>
                                 </div>
-                            </div>
-                            <div class="remove-comments-trigger-body">
-                                <p><strong><?php esc_html_e('Conditions:', 'ultimate-comment-cleaner'); ?></strong> <?php echo esc_html($this->format_trigger_conditions($trigger)); ?></p>
-                                <p><strong><?php esc_html_e('Schedule:', 'ultimate-comment-cleaner'); ?></strong> <?php echo esc_html($trigger['schedule']); ?></p>
-                                <p><strong><?php esc_html_e('Last Run:', 'ultimate-comment-cleaner'); ?></strong> <?php echo isset($trigger['last_run']) ? esc_html($trigger['last_run']) : esc_html__('Never', 'ultimate-comment-cleaner'); ?></p>
-                            </div>
-                            <div class="remove-comments-trigger-actions">
-                                <button type="button" class="remove-comments-btn-small remove-comments-btn-primary remove-comments-edit-trigger" data-id="<?php echo esc_attr($id); ?>">
-                                    <?php esc_html_e('Edit', 'ultimate-comment-cleaner'); ?>
+                            </header>
+                            <dl class="ulticocl-rule-meta">
+                                <div class="is-wide">
+                                    <dt><?php esc_html_e('Checks', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo esc_html($this->rule_summary($rule)); ?></dd>
+                                </div>
+                                <div>
+                                    <dt><?php esc_html_e('Applies to', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo esc_html($scopes[$rule['scope']]); ?></dd>
+                                </div>
+                                <div>
+                                    <dt><?php esc_html_e('Caught so far', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo esc_html(number_format_i18n(isset($st['hits']) ? (int) $st['hits'] : 0)); ?></dd>
+                                </div>
+                                <div>
+                                    <dt><?php esc_html_e('Last full scan', 'ultimate-comment-cleaner'); ?></dt>
+                                    <dd><?php echo 'new' !== $rule['scope'] ? esc_html($last) : '&mdash;'; ?></dd>
+                                </div>
+                            </dl>
+                            <footer class="ulticocl-rule-actions">
+                                <button type="button" class="ulticocl-rbtn is-primary ulticocl-edit-rule" data-id="<?php echo esc_attr($id); ?>">
+                                    <span class="dashicons dashicons-edit" aria-hidden="true"></span><?php esc_html_e('Edit', 'ultimate-comment-cleaner'); ?>
                                 </button>
-                                <button type="button" class="remove-comments-btn-small remove-comments-btn-danger remove-comments-delete-trigger" data-id="<?php echo esc_attr($id); ?>">
-                                    <?php esc_html_e('Delete', 'ultimate-comment-cleaner'); ?>
+                                <button type="button" class="ulticocl-rbtn ulticocl-scan-saved" data-id="<?php echo esc_attr($id); ?>" data-dry="1">
+                                    <span class="dashicons dashicons-visibility" aria-hidden="true"></span><?php esc_html_e('Test on existing', 'ultimate-comment-cleaner'); ?>
                                 </button>
-                            </div>
-                        </div>
+                                <button type="button" class="ulticocl-rbtn ulticocl-scan-saved" data-id="<?php echo esc_attr($id); ?>" data-dry="0" data-action="<?php echo esc_attr($rule['action']); ?>">
+                                    <span class="dashicons dashicons-controls-play" aria-hidden="true"></span><?php esc_html_e('Run now', 'ultimate-comment-cleaner'); ?>
+                                </button>
+                                <button type="button" class="ulticocl-rbtn is-danger ulticocl-delete-rule" data-id="<?php echo esc_attr($id); ?>">
+                                    <span class="dashicons dashicons-trash" aria-hidden="true"></span><?php esc_html_e('Delete', 'ultimate-comment-cleaner'); ?>
+                                </button>
+                            </footer>
+                        </article>
                     <?php endforeach; ?>
                 <?php endif; ?>
             </div>
-            
-            <!-- Trigger Modal -->
-            <div id="remove-comments-trigger-modal" class="remove-comments-modal" style="display:none;">
-                <div class="remove-comments-modal-content">
+
+            <!-- Rule Modal -->
+            <div id="ulticocl-rule-modal" class="remove-comments-modal" style="display:none;">
+                <div class="remove-comments-modal-content ulticocl-wide" role="dialog" aria-modal="true" aria-labelledby="ulticocl-rule-title">
                     <span class="remove-comments-modal-close">&times;</span>
-                    <h2><?php esc_html_e('Create/Edit Trigger', 'ultimate-comment-cleaner'); ?></h2>
-                    <form id="remove-comments-trigger-form">
-                        <input type="hidden" name="trigger_id" id="remove-comments-trigger-id">
+                    <h2 id="ulticocl-rule-title"><?php esc_html_e('Smart Rule', 'ultimate-comment-cleaner'); ?></h2>
+                    <form id="ulticocl-rule-form">
+                        <input type="hidden" name="rule_id" id="ulticocl-rule-id">
+
                         <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Trigger Name', 'ultimate-comment-cleaner'); ?></label>
-                            <input type="text" name="name" id="remove-comments-trigger-name" required>
+                            <label for="ulticocl-rule-name"><?php esc_html_e('Rule name', 'ultimate-comment-cleaner'); ?></label>
+                            <input type="text" name="name" id="ulticocl-rule-name" required>
                         </div>
-                        <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Status', 'ultimate-comment-cleaner'); ?></label>
-                            <select name="status" id="remove-comments-trigger-status" class="remove-comments-select">
-                                <option value="approved"><?php esc_html_e('Approved', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="pending"><?php esc_html_e('Pending', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="spam"><?php esc_html_e('Spam', 'ultimate-comment-cleaner'); ?></option>
-                            </select>
+
+                        <label class="ulticocl-status-card" for="ulticocl-rule-active">
+                            <span class="remove-comments-toggle-switch ulticocl-large">
+                                <input type="checkbox" name="active" value="1" id="ulticocl-rule-active" checked>
+                                <span class="remove-comments-toggle-slider"></span>
+                            </span>
+                            <span class="ulticocl-status-text">
+                                <strong class="ulticocl-status-title"
+                                    data-on="<?php echo esc_attr__('Rule is active', 'ultimate-comment-cleaner'); ?>"
+                                    data-off="<?php echo esc_attr__('Rule is paused', 'ultimate-comment-cleaner'); ?>"><?php esc_html_e('Rule is active', 'ultimate-comment-cleaner'); ?></strong>
+                                <span class="ulticocl-status-help"
+                                    data-on="<?php echo esc_attr__('It checks new comments as they arrive and runs its scheduled scans.', 'ultimate-comment-cleaner'); ?>"
+                                    data-off="<?php echo esc_attr__('Nothing is checked or moved until you turn it back on. Your settings are kept.', 'ultimate-comment-cleaner'); ?>"><?php esc_html_e('It checks new comments as they arrive and runs its scheduled scans.', 'ultimate-comment-cleaner'); ?></span>
+                            </span>
+                        </label>
+
+                        <div class="ulticocl-grid-2">
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-scope"><?php esc_html_e('Check', 'ultimate-comment-cleaner'); ?></label>
+                                <select name="scope" id="ulticocl-rule-scope" class="remove-comments-select">
+                                    <?php foreach ($scopes as $value => $label) : ?>
+                                        <option value="<?php echo esc_attr($value); ?>"><?php echo esc_html($label); ?></option>
+                                    <?php endforeach; ?>
+                                </select>
+                            </div>
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-action"><?php esc_html_e('When it matches', 'ultimate-comment-cleaner'); ?></label>
+                                <select name="rule_action" id="ulticocl-rule-action" class="remove-comments-select">
+                                    <?php foreach ($actions as $value => $label) : ?>
+                                        <option value="<?php echo esc_attr($value); ?>"><?php echo esc_html($label); ?></option>
+                                    <?php endforeach; ?>
+                                </select>
+                            </div>
                         </div>
-                        <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Older Than (days)', 'ultimate-comment-cleaner'); ?></label>
-                            <input type="number" name="older_than" id="remove-comments-trigger-older" min="0">
-                        </div>
-                        <div class="remove-comments-form-group">
-                            <label><?php esc_html_e('Schedule', 'ultimate-comment-cleaner'); ?></label>
-                            <select name="schedule" id="remove-comments-trigger-schedule">
-                                <option value="hourly"><?php esc_html_e('Hourly', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="daily"><?php esc_html_e('Daily', 'ultimate-comment-cleaner'); ?></option>
-                                <option value="weekly"><?php esc_html_e('Weekly', 'ultimate-comment-cleaner'); ?></option>
-                            </select>
-                        </div>
-                        <div class="remove-comments-form-group">
-                            <label>
-                                <div class="remove-comments-toggle-switch">
-                                    <input type="checkbox" name="active" id="remove-comments-trigger-active" checked>
-                                    <span class="remove-comments-toggle-slider"></span>
+
+                        <fieldset class="ulticocl-fieldset">
+                            <legend><?php esc_html_e('What to look for', 'ultimate-comment-cleaner'); ?></legend>
+
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-mode"><?php esc_html_e('Flag a comment when', 'ultimate-comment-cleaner'); ?></label>
+                                <select name="mode" id="ulticocl-rule-mode" class="remove-comments-select">
+                                    <option value="any"><?php esc_html_e('ANY of the checks below match', 'ultimate-comment-cleaner'); ?></option>
+                                    <option value="all"><?php esc_html_e('ALL of the checks below match', 'ultimate-comment-cleaner'); ?></option>
+                                </select>
+                            </div>
+
+                            <div class="remove-comments-form-group">
+                                <label for="ulticocl-rule-keywords"><?php esc_html_e('Keywords', 'ultimate-comment-cleaner'); ?></label>
+                                <textarea name="keywords" id="ulticocl-rule-keywords" rows="6" spellcheck="false"></textarea>
+                                <p class="description"><?php esc_html_e('One per line. "casino" matches the whole word only, "casino*" also matches casinos and casino88, "*casino*" matches anywhere, and /regular expression/ is supported. Not case sensitive.', 'ultimate-comment-cleaner'); ?></p>
+                            </div>
+
+                            <div class="remove-comments-form-group">
+                                <span class="ulticocl-sublabel"><?php esc_html_e('Search in', 'ultimate-comment-cleaner'); ?></span>
+                                <div class="ulticocl-toggle-grid" data-cols="4">
+                                    <?php
+                                    $fields = array(
+                                        'content' => __('Comment text', 'ultimate-comment-cleaner'),
+                                        'author'  => __('Name', 'ultimate-comment-cleaner'),
+                                        'email'   => __('Email', 'ultimate-comment-cleaner'),
+                                        'url'     => __('Website', 'ultimate-comment-cleaner'),
+                                    );
+                                    foreach ($fields as $value => $label) {
+                                        $this->mini_toggle('fields[]', $value, $label);
+                                    }
+                                    ?>
                                 </div>
-                                <span class="remove-comments-toggle-label"><?php esc_html_e('Active', 'ultimate-comment-cleaner'); ?></span>
-                            </label>
-                        </div>
+                            </div>
+
+                            <div class="remove-comments-form-group">
+                                <span class="ulticocl-sublabel"><?php esc_html_e('Writing system', 'ultimate-comment-cleaner'); ?></span>
+                                <div class="ulticocl-toggle-grid" data-cols="3">
+                                    <?php
+                                    foreach ($scripts as $value => $script) {
+                                        // Short name on the switch, the full name on hover.
+                                        $this->mini_toggle('scripts[]', $value, ULTICOCL_Matcher::short_label($value), '', false, $script[1]);
+                                    }
+                                    ?>
+                                </div>
+                                <p class="description ulticocl-inline-field">
+                                    <?php esc_html_e('Flag comments written mostly in the selected alphabets. At least', 'ultimate-comment-cleaner'); ?>
+                                    <input type="number" name="script_min_pct" id="ulticocl-rule-pct" min="1" max="100" class="small-text">
+                                    <?php esc_html_e('% of the letters.', 'ultimate-comment-cleaner'); ?>
+                                </p>
+                            </div>
+
+                            <div class="ulticocl-grid-3">
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-links"><?php esc_html_e('At least N links', 'ultimate-comment-cleaner'); ?></label>
+                                    <input type="number" name="min_links" id="ulticocl-rule-links" min="0">
+                                </div>
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-words"><?php esc_html_e('Shorter than N words', 'ultimate-comment-cleaner'); ?></label>
+                                    <input type="number" name="max_words" id="ulticocl-rule-words" min="0">
+                                </div>
+                                <div class="remove-comments-form-group ulticocl-field-toggle">
+                                    <?php $this->mini_toggle('has_url', '1', __('Has a website', 'ultimate-comment-cleaner'), 'ulticocl-rule-has-url'); ?>
+                                </div>
+                            </div>
+                            <p class="description"><?php esc_html_e('Use 0 to ignore links and length. Combine with "ALL" for rules like "short comment with a link".', 'ultimate-comment-cleaner'); ?></p>
+                        </fieldset>
+
+                        <fieldset class="ulticocl-fieldset ulticocl-existing-only">
+                            <legend><?php esc_html_e('Existing comments', 'ultimate-comment-cleaner'); ?></legend>
+
+                            <div class="remove-comments-form-group">
+                                <span class="ulticocl-sublabel"><?php esc_html_e('Status', 'ultimate-comment-cleaner'); ?></span>
+                                <div class="ulticocl-toggle-grid" data-cols="3">
+                                    <?php $this->mini_toggle('status[]', 'approved', __('Approved', 'ultimate-comment-cleaner')); ?>
+                                    <?php $this->mini_toggle('status[]', 'pending', __('Pending', 'ultimate-comment-cleaner')); ?>
+                                    <?php $this->mini_toggle('status[]', 'spam', __('Spam', 'ultimate-comment-cleaner')); ?>
+                                </div>
+                            </div>
+
+                            <div class="ulticocl-grid-2">
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-older"><?php esc_html_e('Only older than (days)', 'ultimate-comment-cleaner'); ?></label>
+                                    <input type="number" name="older_than" id="ulticocl-rule-older" min="0">
+                                </div>
+                                <div class="remove-comments-form-group">
+                                    <label for="ulticocl-rule-schedule"><?php esc_html_e('Scan', 'ultimate-comment-cleaner'); ?></label>
+                                    <select name="schedule" id="ulticocl-rule-schedule" class="remove-comments-select">
+                                        <option value="hourly"><?php esc_html_e('Hourly', 'ultimate-comment-cleaner'); ?></option>
+                                        <option value="daily"><?php esc_html_e('Daily', 'ultimate-comment-cleaner'); ?></option>
+                                        <option value="weekly"><?php esc_html_e('Weekly', 'ultimate-comment-cleaner'); ?></option>
+                                    </select>
+                                </div>
+                            </div>
+                            <p class="description"><?php esc_html_e('Without any checks above, a rule needs an age of at least 1 day, or must target spam only.', 'ultimate-comment-cleaner'); ?></p>
+                        </fieldset>
+
                         <div class="remove-comments-form-actions">
-                            <button type="submit" class="remove-comments-btn remove-comments-btn-primary"><?php esc_html_e('Save Trigger', 'ultimate-comment-cleaner'); ?></button>
+                            <button type="submit" class="remove-comments-btn remove-comments-btn-primary"><?php esc_html_e('Save Rule', 'ultimate-comment-cleaner'); ?></button>
+                            <button type="button" id="ulticocl-test-form" class="remove-comments-btn remove-comments-btn-secondary"><?php esc_html_e('Test on existing comments', 'ultimate-comment-cleaner'); ?></button>
                             <button type="button" class="remove-comments-modal-close-btn remove-comments-modal-close" title="<?php esc_attr_e('Close', 'ultimate-comment-cleaner'); ?>">
                                 <span class="dashicons dashicons-no-alt"></span>
@@ -528 +801 @@
         <?php
     }
-    
+
+    /**
+     * Manage Comments and Quarantine tabs.
+     */
+    private function render_comments_tab($mode) {
+        require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
+        require_once ULTICOCL_PLUGIN_DIR . 'includes/class-ulticocl-comments-table.php';
+        $table = new ULTICOCL_Comments_Table($mode);
+        $table->prepare_items();
+        $days = (int) $this->get_settings()['quarantine_days'];
+        ?>
+        <div class="remove-comments-comments-panel">
+            <div class="remove-comments-panel-header ulticocl-panel-head">
+                <div class="ulticocl-panel-head-text">
+                <?php if ('quarantine' === $mode) : ?>
+                    <h2><?php esc_html_e('Quarantine', 'ultimate-comment-cleaner'); ?></h2>
+                    <p>
+                        <?php
+                        echo esc_html(
+                            $days > 0
+                                /* translators: %d: number of days */
+                                ? sprintf(_n('Comments caught by your rules wait here for %d day, then are deleted. Restore the ones that are not spam.', 'Comments caught by your rules wait here for %d days, then are deleted. Restore the ones that are not spam.', $days, 'ultimate-comment-cleaner'), $days)
+                                : __('Comments caught by your rules wait here until you restore or delete them. Automatic deletion is off (see Settings).', 'ultimate-comment-cleaner')
+                        );
+                        echo ' ' . esc_html__('A restored comment is never caught by your rules again.', 'ultimate-comment-cleaner');
+                        ?>
+                    </p>
+                <?php else : ?>
+                    <h2><?php esc_html_e('Manage Comments', 'ultimate-comment-cleaner'); ?></h2>
+                    <p><?php esc_html_e('Search, filter and clean up comments in bulk. Spam signals such as links and writing system are shown under each comment.', 'ultimate-comment-cleaner'); ?></p>
+                <?php endif; ?>
+                </div>
+                <?php if ('quarantine' === $mode) : ?>
+                    <div class="ulticocl-panel-head-actions">
+                        <button type="button" id="ulticocl-empty-quarantine" class="ulticocl-danger-btn">
+                            <span class="dashicons dashicons-trash" aria-hidden="true"></span>
+                            <?php esc_html_e('Delete all quarantined comments', 'ultimate-comment-cleaner'); ?>
+                        </button>
+                    </div>
+                <?php endif; ?>
+            </div>
+
+            <?php if ($table->is_review()) : ?>
+                <?php
+                $preview = get_transient('ulticocl_preview_' . get_current_user_id());
+                $name = is_array($preview) && !empty($preview['name']) ? $preview['name'] : '';
+                ?>
+                <div class="notice notice-info inline">
+                    <p>
+                        <?php
+                        /* translators: %s: rule name */
+                        echo esc_html(sprintf(__('Showing comments that the rule "%s" would catch. Select the ones to act on, or review them first.', 'ultimate-comment-cleaner'), $name));
+                        ?>
+                        <a href="<?php echo esc_url(add_query_arg(array('page' => 'ultimate-comment-cleaner', 'tab' => 'manage'), admin_url('tools.php'))); ?>"><?php esc_html_e('Show all comments', 'ultimate-comment-cleaner'); ?></a>
+                    </p>
+                </div>
+            <?php endif; ?>
+
+            <?php $table->render_filters(); ?>
+            <?php $table->views(); ?>
+            <form method="post">
+                <?php $table->display(); ?>
+            </form>
+        </div>
+        <?php
+    }
+
+    private function render_notice() {
+        // phpcs:disable WordPress.Security.NonceVerification.Recommended -- Display-only result message.
+        if (empty($_GET['ulticocl_notice'])) {
+            return;
+        }
+        $n = isset($_GET['ulticocl_n']) ? absint($_GET['ulticocl_n']) : 0;
+        $action = isset($_GET['ulticocl_a']) ? sanitize_key(wp_unslash($_GET['ulticocl_a'])) : '';
+        // phpcs:enable WordPress.Security.NonceVerification.Recommended
+        $messages = array(
+            /* translators: %d: number of comments */
+            'approve'    => _n('%d comment approved.', '%d comments approved.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'unapprove'  => _n('%d comment unapproved.', '%d comments unapproved.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'spam'       => _n('%d comment marked as spam.', '%d comments marked as spam.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'quarantine' => _n('%d comment moved to quarantine.', '%d comments moved to quarantine.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'restore'    => _n('%d comment restored.', '%d comments restored.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'delete'     => _n('%d comment deleted.', '%d comments deleted.', $n, 'ultimate-comment-cleaner'),
+        );
+        if (isset($messages[$action])) {
+            echo '<div class="notice notice-success is-dismissible"><p>' . esc_html(sprintf($messages[$action], $n)) . '</p></div>';
+        }
+    }
+
     private function render_settings_tab() {
-        $settings = get_option('ulticocl_settings', array());
+        $settings = $this->get_settings();
         ?>
         <div class="remove-comments-settings-panel">
             <div class="remove-comments-panel-header">
                 <h2><?php esc_html_e('Plugin Settings', 'ultimate-comment-cleaner'); ?></h2>
+                <p><?php esc_html_e('Choose what gets logged, who is told about it, and how long quarantined comments are kept.', 'ultimate-comment-cleaner'); ?></p>
             </div>
             
@@ -588 +955 @@
                     </div>
                 </div>
+
+                <div class="remove-comments-form-section">
+                    <h3><?php esc_html_e('Quarantine', 'ultimate-comment-cleaner'); ?></h3>
+                    <div class="remove-comments-form-group">
+                        <label for="ulticocl_quarantine_days"><?php esc_html_e('Delete quarantined comments after (days)', 'ultimate-comment-cleaner'); ?></label>
+                        <input type="number" name="quarantine_days" id="ulticocl_quarantine_days" min="0" max="365" value="<?php echo esc_attr((int) $settings['quarantine_days']); ?>" class="small-text">
+                        <p class="description"><?php esc_html_e('Quarantined comments are hidden from your site and can be restored until then. Use 0 to keep them until you delete them yourself.', 'ultimate-comment-cleaner'); ?></p>
+                    </div>
+                    <div class="remove-comments-form-group">
+                        <label for="ulticocl_allowlist"><?php esc_html_e('Never touch comments from', 'ultimate-comment-cleaner'); ?></label>
+                        <textarea name="allowlist" id="ulticocl_allowlist" rows="4" class="remove-comments-form-input" placeholder="friend@example.com&#10;@mycompany.com"><?php echo esc_textarea($settings['allowlist']); ?></textarea>
+                        <p class="description"><?php esc_html_e('One email address or @domain per line. Rules skip these commenters. Comments by users who can moderate comments are always skipped.', 'ultimate-comment-cleaner'); ?></p>
+                    </div>
+                </div>
                 
                 <div class="remove-comments-form-actions">
@@ -599 +980 @@
     private function get_comment_stats() {
         global $wpdb;
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct queries needed for comment counts, caching not practical for real-time stats
-        $stats = array(
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for total comments count
-            'total' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for approved comments count
-            'approved' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = '1' AND comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for pending comments count
-            'pending' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = '0' AND comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for spam comments count
-            'spam' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = 'spam' AND comment_type = 'comment'"),
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query for trash comments count
-            'trash' => (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE comment_approved = 'trash' AND comment_type = 'comment'"),
-            'triggers' => count(get_option('ulticocl_triggers', array()))
+
+        $types = $this->types_sql();
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- One grouped count; $types is prepared in types_sql().
+        $rows = $wpdb->get_results("SELECT comment_approved AS status, COUNT(*) AS n FROM $wpdb->comments WHERE $types GROUP BY comment_approved", OBJECT_K);
+        $rows = is_array($rows) ? $rows : array();
+        $count = function ($status) use ($rows) {
+            return isset($rows[$status]) ? (int) $rows[$status]->n : 0;
+        };
+
+        return array(
+            'total'      => (int) array_sum(wp_list_pluck($rows, 'n')),
+            'approved'   => $count('1'),
+            'pending'    => $count('0'),
+            'spam'       => $count('spam'),
+            'trash'      => $count('trash'),
+            'quarantine' => $count(self::QUARANTINE),
+            'rules'      => count($this->get_rules()),
+            'caught'     => (int) array_sum(wp_list_pluck((array) get_option('ulticocl_rule_state', array()), 'hits')),
         );
-        
-        return $stats;
-    }
-    
+    }
+
+    /**
+     * Prepared "comment_type IN (...)" fragment for the types this plugin manages.
+     */
+    private function types_sql() {
+        global $wpdb;
+        return $wpdb->prepare('comment_type IN (' . implode(',', array_fill(0, count(self::TYPES), '%s')) . ')', self::TYPES);
+    }
+
     private function get_comment_authors() {
         global $wpdb;
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed for author list, caching not practical
-        return $wpdb->get_results("SELECT DISTINCT comment_author, comment_author_email FROM $wpdb->comments WHERE comment_type = 'comment' AND comment_author_email != '' ORDER BY comment_author ASC LIMIT 200");
-    }
-    
+        $types = $this->types_sql();
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- Direct query needed for author list, caching not practical; $types is prepared in types_sql().
+        return $wpdb->get_results("SELECT DISTINCT comment_author, comment_author_email FROM $wpdb->comments WHERE $types AND comment_author_email != '' ORDER BY comment_author ASC LIMIT 200");
+    }
+
     private function render_recent_activity() {
         $activities = get_option('ulticocl_activity_log', array());
@@ -630 +1022 @@
             return;
         }
-        
+
         $activities = array_slice(array_reverse($activities), 0, 10);
         foreach ($activities as $activity) {
@@ -639 +1031 @@
         }
     }
-    
-    private function format_trigger_conditions($trigger) {
-        $conditions = array();
-        if (isset($trigger['status'])) {
-            $conditions[] = esc_html__('Status:', 'ultimate-comment-cleaner') . ' ' . esc_html($trigger['status']);
-        }
-        if (isset($trigger['older_than'])) {
-            $conditions[] = esc_html__('Older than:', 'ultimate-comment-cleaner') . ' ' . intval($trigger['older_than']) . ' ' . esc_html__('days', 'ultimate-comment-cleaner');
-        }
-        return implode(', ', $conditions);
-    }
-    
-    public function ajax_delete_comments() {
+
+    private function action_labels() {
+        return array(
+            'quarantine' => __('Quarantine', 'ultimate-comment-cleaner'),
+            'spam'       => __('Mark as spam', 'ultimate-comment-cleaner'),
+            'delete'     => __('Delete permanently', 'ultimate-comment-cleaner'),
+        );
+    }
+
+    private function action_message($action, $n) {
+        $messages = array(
+            /* translators: %d: number of comments */
+            'delete'     => _n('Deleted %d comment.', 'Deleted %d comments.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'quarantine' => _n('Moved %d comment to quarantine.', 'Moved %d comments to quarantine.', $n, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'spam'       => _n('Marked %d comment as spam.', 'Marked %d comments as spam.', $n, 'ultimate-comment-cleaner'),
+        );
+        return sprintf($messages[$action], $n);
+    }
+
+    /**
+     * One-line description of what a rule checks, for the rules list.
+     */
+    private function rule_summary($rule) {
+        $parts = array();
+        if (!empty($rule['keywords'])) {
+            $shown = array_slice($rule['keywords'], 0, 3);
+            $more = count($rule['keywords']) - count($shown);
+            /* translators: 1: sample keywords, 2: number of additional keywords */
+            $parts[] = $more > 0 ? sprintf(__('keywords %1$s (+%2$d more)', 'ultimate-comment-cleaner'), implode(', ', $shown), $more) : sprintf(__('keywords %s', 'ultimate-comment-cleaner'), implode(', ', $shown));
+        }
+        if (!empty($rule['scripts'])) {
+            $scripts = ULTICOCL_Matcher::scripts();
+            $labels = array();
+            foreach ($rule['scripts'] as $key) {
+                if (isset($scripts[$key])) {
+                    $labels[] = ULTICOCL_Matcher::short_label($key);
+                }
+            }
+            /* translators: 1: writing systems, 2: percentage */
+            $parts[] = sprintf(__('%1$s text (%2$d%%+)', 'ultimate-comment-cleaner'), implode('/', $labels), (int) $rule['script_min_pct']);
+        }
+        if (!empty($rule['min_links'])) {
+            /* translators: %d: number of links */
+            $parts[] = sprintf(_n('%d+ link', '%d+ links', (int) $rule['min_links'], 'ultimate-comment-cleaner'), (int) $rule['min_links']);
+        }
+        if (!empty($rule['has_url'])) {
+            $parts[] = __('has a website', 'ultimate-comment-cleaner');
+        }
+        if (!empty($rule['max_words'])) {
+            /* translators: %d: number of words */
+            $parts[] = sprintf(__('under %d words', 'ultimate-comment-cleaner'), (int) $rule['max_words']);
+        }
+        $glue = 'all' === $rule['mode'] ? ' ' . __('AND', 'ultimate-comment-cleaner') . ' ' : ' ' . __('OR', 'ultimate-comment-cleaner') . ' ';
+        $text = implode($glue, $parts);
+
+        if ('new' !== $rule['scope']) {
+            $scope = array();
+            $scope[] = sprintf(
+                /* translators: %s: comment statuses */
+                __('status: %s', 'ultimate-comment-cleaner'),
+                implode(', ', (array) $rule['status'])
+            );
+            if (!empty($rule['older_than'])) {
+                /* translators: %d: number of days */
+                $scope[] = sprintf(_n('older than %d day', 'older than %d days', (int) $rule['older_than'], 'ultimate-comment-cleaner'), (int) $rule['older_than']);
+            }
+            $text .= ('' !== $text ? ' (' : '') . implode(', ', $scope) . ('' !== $text ? ')' : '');
+        }
+        return $text;
+    }
+
+    // phpcs:disable WordPress.Security.NonceVerification.Missing -- The AJAX handlers below verify the nonce in verify_ajax().
+
+    private function verify_ajax() {
         check_ajax_referer('ulticocl_nonce', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
             wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
         }
-        
+    }
+
+    /**
+     * Process one batch of matching comments. The admin JS calls this repeatedly
+     * until `done` is true, so large clean-ups never hit request time limits.
+     */
+    public function ajax_bulk_process() {
+        $this->verify_ajax();
+
         $filters = $this->extract_filter_params();
-        $deleted = $this->delete_comments_by_filters($filters);
-        
-        // translators: %d: number of comments deleted
-        $this->log_activity(sprintf(esc_html__('Deleted %d comments', 'ultimate-comment-cleaner'), $deleted));
-        $this->send_email_notification($deleted, 'manual');
-        
+        $action = $filters['clean_action'];
+        $processed = $this->process_by_filters($filters);
+        $remaining = $this->count_comments_by_filters($filters);
+        $total = (isset($_POST['processed_so_far']) ? absint($_POST['processed_so_far']) : 0) + $processed;
+        // Nothing processed this round means we are finished, or blocked (e.g. by another plugin): stop either way.
+        $done = 0 === $processed || 0 === $remaining;
+
+        if ($done && $total > 0) {
+            $this->log_activity($this->action_message($action, $total));
+            $this->send_email_notification($total, 'manual', $action);
+        }
+
         wp_send_json_success(array(
-            // translators: %d: number of comments deleted
-            'message' => sprintf(esc_html__('Successfully deleted %d comments.', 'ultimate-comment-cleaner'), $deleted),
-            'count' => $deleted
+            'processed' => $processed,
+            'total' => $total,
+            'remaining' => $remaining,
+            'done' => $done,
+            'message' => $this->action_message($action, $total),
         ));
     }
-    
-    public function ajax_get_stats() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        wp_send_json_success($this->get_comment_stats());
-    }
-    
+
+    /**
+     * Dashboard data for a date range. The range is remembered per user.
+     */
+    public function ajax_dashboard() {
+        $this->verify_ajax();
+
+        $days = isset($_POST['days']) ? absint($_POST['days']) : 30;
+        if (!in_array($days, ULTICOCL_Insights::RANGES, true)) {
+            $days = 30;
+        }
+        update_user_meta(get_current_user_id(), 'ulticocl_dash_days', $days);
+        wp_send_json_success(ULTICOCL_Insights::collect($days, $this->get_comment_stats()));
+    }
+
     public function ajax_export_comments() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
+        $this->verify_ajax();
+
         $filters = $this->extract_filter_params();
+        unset($filters['clean_action']); // Export everything that matches, including quarantined comments.
         $this->export_comments($filters);
     }
-    
-    public function ajax_save_trigger() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $triggers = get_option('ulticocl_triggers', array());
-        $trigger_id = isset($_POST['trigger_id']) ? sanitize_text_field(wp_unslash($_POST['trigger_id'])) : uniqid('trigger_');
-        
-        // Preserve existing trigger data if editing
-        $existing_trigger = isset($triggers[$trigger_id]) ? $triggers[$trigger_id] : array();
-        
-        $triggers[$trigger_id] = array(
-            'name' => isset($_POST['name']) ? sanitize_text_field(wp_unslash($_POST['name'])) : '',
-            'status' => isset($_POST['status']) ? sanitize_text_field(wp_unslash($_POST['status'])) : 'approved',
-            'older_than' => isset($_POST['older_than']) ? intval($_POST['older_than']) : 0,
-            'schedule' => isset($_POST['schedule']) ? sanitize_text_field(wp_unslash($_POST['schedule'])) : 'hourly',
-            'active' => isset($_POST['active']) && intval($_POST['active']) === 1,
-            'created' => isset($existing_trigger['created']) ? $existing_trigger['created'] : current_time('mysql'),
-            'last_run' => isset($existing_trigger['last_run']) ? $existing_trigger['last_run'] : null
-        );
-        
-        update_option('ulticocl_triggers', $triggers);
-        wp_send_json_success(array('message' => __('Trigger saved successfully.', 'ultimate-comment-cleaner')));
-    }
-    
-    public function ajax_delete_trigger() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $trigger_id = isset($_POST['trigger_id']) ? sanitize_text_field(wp_unslash($_POST['trigger_id'])) : '';
-        $triggers = get_option('ulticocl_triggers', array());
-        
-        if (isset($triggers[$trigger_id])) {
-            unset($triggers[$trigger_id]);
-            update_option('ulticocl_triggers', $triggers);
-            wp_send_json_success(array('message' => __('Trigger deleted successfully.', 'ultimate-comment-cleaner')));
-        }
-        
-        wp_send_json_error(array('message' => __('Trigger not found.', 'ultimate-comment-cleaner')));
-    }
-    
-    public function ajax_get_trigger() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $trigger_id = isset($_POST['trigger_id']) ? sanitize_text_field(wp_unslash($_POST['trigger_id'])) : '';
-        $triggers = get_option('ulticocl_triggers', array());
-        
-        if (isset($triggers[$trigger_id])) {
-            wp_send_json_success($triggers[$trigger_id]);
-        }
-        
-        wp_send_json_error(array('message' => __('Trigger not found.', 'ultimate-comment-cleaner')));
-    }
-    
+
     public function ajax_preview_count() {
-        check_ajax_referer('ulticocl_nonce', 'nonce');
-        
-        if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
-        }
-        
-        $filters = $this->extract_filter_params();
-        $count = $this->count_comments_by_filters($filters);
-        
-        wp_send_json_success(array('count' => $count));
-    }
-    
+        $this->verify_ajax();
+
+        wp_send_json_success(array('count' => $this->count_comments_by_filters($this->extract_filter_params())));
+    }
+
+    public function ajax_save_rule() {
+        $this->verify_ajax();
+
+        $rule = $this->rule_from_post();
+        if (is_wp_error($rule)) {
+            wp_send_json_error(array('message' => $rule->get_error_message()));
+        }
+
+        $rules = $this->get_rules();
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        // Only reuse an ID that already exists; anything else is a new rule.
+        if ('' === $id || !isset($rules[$id])) {
+            $id = uniqid('rule_');
+        }
+        $rule['created'] = !empty($rules[$id]['created']) ? $rules[$id]['created'] : current_time('mysql');
+        $rules[$id] = $rule;
+        update_option('ulticocl_rules', $rules, false);
+
+        // An edited rule is scanned from the start again.
+        $state = get_option('ulticocl_rule_state', array());
+        $state[$id] = array_merge(array('hits' => 0, 'last_run' => 0), isset($state[$id]) ? $state[$id] : array(), array('cursor' => 0));
+        update_option('ulticocl_rule_state', $state, false);
+
+        wp_send_json_success(array('message' => __('Rule saved.', 'ultimate-comment-cleaner'), 'id' => $id));
+    }
+
+    public function ajax_delete_rule() {
+        $this->verify_ajax();
+
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        $rules = $this->get_rules();
+        if (!isset($rules[$id])) {
+            wp_send_json_error(array('message' => __('Rule not found.', 'ultimate-comment-cleaner')));
+        }
+        unset($rules[$id]);
+        update_option('ulticocl_rules', $rules, false);
+        $state = get_option('ulticocl_rule_state', array());
+        unset($state[$id]);
+        update_option('ulticocl_rule_state', $state, false);
+        wp_send_json_success(array('message' => __('Rule deleted.', 'ultimate-comment-cleaner')));
+    }
+
+    public function ajax_get_rule() {
+        $this->verify_ajax();
+
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        $rules = $this->get_rules();
+        if (!isset($rules[$id])) {
+            wp_send_json_error(array('message' => __('Rule not found.', 'ultimate-comment-cleaner')));
+        }
+        wp_send_json_success($rules[$id]);
+    }
+
+    /**
+     * Scan one chunk of existing comments with a rule. With `dry` set nothing is changed:
+     * the matches are counted and sampled, and their IDs are kept for "Review matches".
+     */
+    public function ajax_scan_rule() {
+        $this->verify_ajax();
+
+        $dry = !empty($_POST['dry']);
+        $id = isset($_POST['rule_id']) ? sanitize_key(wp_unslash($_POST['rule_id'])) : '';
+        $rules = $this->get_rules();
+
+        if (!$dry) {
+            if (!isset($rules[$id])) {
+                wp_send_json_error(array('message' => __('Save the rule before running it.', 'ultimate-comment-cleaner')));
+            }
+            $rule = $rules[$id];
+        } elseif (isset($_POST['name'])) {
+            $rule = $this->rule_from_post();
+            if (is_wp_error($rule)) {
+                wp_send_json_error(array('message' => $rule->get_error_message()));
+            }
+        } elseif (isset($rules[$id])) {
+            $rule = $rules[$id];
+        } else {
+            wp_send_json_error(array('message' => __('Rule not found.', 'ultimate-comment-cleaner')));
+        }
+
+        $cursor = isset($_POST['cursor']) ? absint($_POST['cursor']) : 0;
+        $result = $this->scan_rule($rule, $cursor, self::BATCH_SIZE, $dry, $id);
+        if (is_wp_error($result)) {
+            wp_send_json_error(array('message' => $result->get_error_message()));
+        }
+
+        if (0 === $cursor) {
+            $result['total'] = $this->count_scope($rule);
+        }
+
+        if ($dry) {
+            $key = 'ulticocl_preview_' . get_current_user_id();
+            $preview = get_transient($key);
+            if (0 === $cursor || !is_array($preview)) {
+                $preview = array('name' => $rule['name'], 'ids' => array());
+            }
+            $preview['ids'] = array_slice(array_merge($preview['ids'], $result['ids']), 0, 1000);
+            set_transient($key, $preview, HOUR_IN_SECONDS);
+        } else {
+            $this->add_hits($id, $result['acted']);
+            $this->record_stat('scan', $result['acted'], $id);
+            $acted = (isset($_POST['acted_so_far']) ? absint($_POST['acted_so_far']) : 0) + $result['acted'];
+            if ($result['done'] && $acted > 0) {
+                /* translators: 1: rule name, 2: result sentence */
+                $this->log_activity(sprintf(__('Rule "%1$s" run manually: %2$s', 'ultimate-comment-cleaner'), $rule['name'], $this->action_message($rule['action'], $acted)));
+                $this->send_email_notification($acted, $rule['name'], $rule['action']);
+            }
+        }
+        unset($result['ids']);
+
+        wp_send_json_success($result);
+    }
+
     /**
      * Extract and sanitize filter parameters from $_POST
@@ -772 +1292 @@
     private function extract_filter_params() {
         $filters = array();
-        
+
         // Status filter (array)
         if (isset($_POST['status']) && is_array($_POST['status'])) {
-            $filters['status'] = array_map('sanitize_text_field', wp_unslash($_POST['status']));
-        }
-        
+            $filters['status'] = array_map('sanitize_key', wp_unslash($_POST['status']));
+        }
+
         // Date range
-        if (isset($_POST['date_from']) && !empty($_POST['date_from'])) {
+        if (!empty($_POST['date_from'])) {
             $filters['date_from'] = sanitize_text_field(wp_unslash($_POST['date_from']));
         }
-        if (isset($_POST['date_to']) && !empty($_POST['date_to'])) {
+        if (!empty($_POST['date_to'])) {
             $filters['date_to'] = sanitize_text_field(wp_unslash($_POST['date_to']));
         }
-        
+
         // Author filter
-        if (isset($_POST['author']) && !empty($_POST['author'])) {
+        if (!empty($_POST['author'])) {
             $filters['author'] = sanitize_text_field(wp_unslash($_POST['author']));
         }
-        
+
+        // Search text
+        if (!empty($_POST['search'])) {
+            $filters['search'] = sanitize_text_field(wp_unslash($_POST['search']));
+        }
+
         // Post type filter (array)
         if (isset($_POST['post_type']) && is_array($_POST['post_type'])) {
             $filters['post_type'] = array_map('sanitize_key', wp_unslash($_POST['post_type']));
         }
-        
+
         // Additional filters (boolean flags)
-        if (isset($_POST['has_url']) && !empty($_POST['has_url'])) {
-            $filters['has_url'] = 1;
-        }
-        if (isset($_POST['no_url']) && !empty($_POST['no_url'])) {
-            $filters['no_url'] = 1;
-        }
-        if (isset($_POST['short_comments']) && !empty($_POST['short_comments'])) {
-            $filters['short_comments'] = 1;
-        }
-        
+        $filters['has_url'] = !empty($_POST['has_url']);
+        $filters['no_url'] = !empty($_POST['no_url']);
+        $filters['short_comments'] = !empty($_POST['short_comments']);
+
         // Word count filters
-        if (isset($_POST['min_words']) && !empty($_POST['min_words'])) {
-            $filters['min_words'] = intval($_POST['min_words']);
-        }
-        if (isset($_POST['max_words']) && !empty($_POST['max_words'])) {
-            $filters['max_words'] = intval($_POST['max_words']);
-        }
-        
+        $filters['min_words'] = isset($_POST['min_words']) ? absint($_POST['min_words']) : 0;
+        $filters['max_words'] = isset($_POST['max_words']) ? absint($_POST['max_words']) : 0;
+
+        // What to do with the matches; anything unknown falls back to the safe, restorable option.
+        $action = isset($_POST['clean_action']) ? sanitize_key(wp_unslash($_POST['clean_action'])) : '';
+        $filters['clean_action'] = in_array($action, ULTICOCL_Matcher::ACTIONS, true) ? $action : 'quarantine';
+
         return $filters;
     }
-    
+
+    /**
+     * Build a rule from the rule form in $_POST.
+     *
+     * @return array|WP_Error Canonical rule, or an error describing what to fix.
+     */
+    private function rule_from_post() {
+        $p = wp_unslash($_POST); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Every field is sanitized below.
+        $text = function ($key) use ($p) {
+            return isset($p[$key]) && is_string($p[$key]) ? sanitize_text_field($p[$key]) : '';
+        };
+        $keys = function ($key) use ($p) {
+            return isset($p[$key]) && is_array($p[$key]) ? array_map('sanitize_key', $p[$key]) : array();
+        };
+        $int = function ($key, $max) use ($p) {
+            return isset($p[$key]) ? min($max, absint($p[$key])) : 0;
+        };
+
+        $rule = ULTICOCL_Matcher::defaults();
+        $rule['name'] = $text('name');
+        $rule['active'] = !empty($p['active']);
+        $rule['mode'] = 'all' === $text('mode') ? 'all' : 'any';
+        $scope = $text('scope');
+        $rule['scope'] = in_array($scope, ULTICOCL_Matcher::SCOPES, true) ? $scope : 'both';
+        $action = $text('rule_action');
+        $rule['action'] = in_array($action, ULTICOCL_Matcher::ACTIONS, true) ? $action : 'quarantine';
+        $schedule = $text('schedule');
+        $rule['schedule'] = in_array($schedule, self::SCHEDULES, true) ? $schedule : 'daily';
+
+        $raw = isset($p['keywords']) && is_string($p['keywords']) ? sanitize_textarea_field($p['keywords']) : '';
+        // Not /\R/: without the u flag it treats byte 0x85 as a newline and would cut Cyrillic letters in half.
+        $lines = array_filter(array_map('trim', preg_split('/\r\n|\r|\n/', $raw)), 'strlen');
+        $rule['keywords'] = array_slice(array_values(array_unique($lines)), 0, 500);
+        $invalid = array();
+        foreach ($rule['keywords'] as $keyword) {
+            if (null === ULTICOCL_Matcher::keyword_regex($keyword)) {
+                $invalid[] = $keyword;
+            }
+        }
+
+        $fields = array_values(array_intersect($keys('fields'), ULTICOCL_Matcher::FIELDS));
+        $rule['fields'] = $fields ? $fields : array('content', 'author', 'url');
+        $rule['scripts'] = array_values(array_intersect($keys('scripts'), array_keys(ULTICOCL_Matcher::scripts())));
+        $rule['script_min_pct'] = max(1, $int('script_min_pct', 100));
+        $rule['min_links'] = $int('min_links', 100);
+        $rule['has_url'] = !empty($p['has_url']);
+        $rule['max_words'] = $int('max_words', 1000);
+        $status = array_values(array_intersect($keys('status'), ULTICOCL_Matcher::RULE_STATUSES));
+        $rule['status'] = $status ? $status : ULTICOCL_Matcher::RULE_STATUSES;
+        $rule['older_than'] = $int('older_than', 3650);
+
+        if ('' === $rule['name']) {
+            return new WP_Error('name', __('Please enter a rule name.', 'ultimate-comment-cleaner'));
+        }
+        if ($invalid) {
+            /* translators: %s: invalid keyword lines */
+            return new WP_Error('keywords', sprintf(__('These keywords are not valid: %s', 'ultimate-comment-cleaner'), implode(', ', array_slice($invalid, 0, 3))));
+        }
+        if (!ULTICOCL_Matcher::has_signals($rule)) {
+            if ('new' === $rule['scope']) {
+                return new WP_Error('signals', __('Rules for new comments need at least one check: keywords, a writing system, links, a website or short comments.', 'ultimate-comment-cleaner'));
+            }
+            $rule['scope'] = 'existing'; // Nothing to look for in a new comment.
+        }
+        if (!ULTICOCL_Matcher::scope_is_safe($rule)) {
+            return new WP_Error('unsafe', __('This rule would match every comment. Add a check, set "Only older than" to at least 1 day, or select Spam only.', 'ultimate-comment-cleaner'));
+        }
+
+        return $rule;
+    }
+
+    // phpcs:enable WordPress.Security.NonceVerification.Missing
+
+    /**
+     * Build the SQL WHERE clause shared by preview count, bulk clean and export.
+     *
+     * Fails closed: a filter that is present but invalid matches nothing, so a bad
+     * request can never widen a bulk action to every comment.
+     *
+     * @param array $filters Sanitized filters.
+     * @return string|false WHERE clause, or false when nothing can match.
+     */
+    private function build_where($filters) {
+        global $wpdb;
+
+        $where = array($this->types_sql());
+
+        // Status is required; 'all' means no status restriction.
+        if (empty($filters['status'])) {
+            return false;
+        }
+        if (!in_array('all', $filters['status'], true)) {
+            $statuses = array_values(array_intersect_key(self::STATUS_MAP, array_flip($filters['status'])));
+            if (empty($statuses)) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_approved IN (' . implode(',', array_fill(0, count($statuses), '%s')) . ')', $statuses);
+        }
+
+        // Skip comments the action cannot change, so each batch makes progress.
+        if (isset($filters['clean_action'])) {
+            if ('quarantine' === $filters['clean_action']) {
+                $where[] = $wpdb->prepare('comment_approved != %s', self::QUARANTINE);
+            } elseif ('spam' === $filters['clean_action']) {
+                $where[] = $wpdb->prepare('comment_approved NOT IN (%s, %s)', 'spam', self::QUARANTINE);
+            }
+        }
+
+        // Date range (site local time, as entered by the admin)
+        if (!empty($filters['date_from'])) {
+            if (!$this->is_valid_date($filters['date_from'])) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_date >= %s', $filters['date_from'] . ' 00:00:00');
+        }
+        if (!empty($filters['date_to'])) {
+            if (!$this->is_valid_date($filters['date_to'])) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_date <= %s', $filters['date_to'] . ' 23:59:59');
+        }
+
+        // Author filter
+        if (!empty($filters['author']) && 'all' !== $filters['author']) {
+            if (!is_email($filters['author'])) {
+                return false;
+            }
+            $where[] = $wpdb->prepare('comment_author_email = %s', $filters['author']);
+        }
+
+        // Search text
+        if (!empty($filters['search'])) {
+            $like = '%' . $wpdb->esc_like($filters['search']) . '%';
+            $where[] = $wpdb->prepare('(comment_content LIKE %s OR comment_author LIKE %s OR comment_author_email LIKE %s OR comment_author_url LIKE %s)', $like, $like, $like, $like);
+        }
+
+        // Post type filter
+        if (!empty($filters['post_type']) && !in_array('all', $filters['post_type'], true)) {
+            $where[] = $wpdb->prepare(
+                "comment_post_ID IN (SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($filters['post_type']), '%s')) . '))',
+                $filters['post_type']
+            );
+        }
+
+        // URL filters
+        if (!empty($filters['has_url'])) {
+            $where[] = "comment_author_url != ''";
+        }
+        if (!empty($filters['no_url'])) {
+            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
+        }
+
+        // ponytail: word count = spaces + 1; newlines and double spaces skew it. Good enough for spam triage.
+        $words = "LENGTH(TRIM(comment_content)) - LENGTH(REPLACE(TRIM(comment_content), ' ', '')) + 1";
+        if (!empty($filters['short_comments'])) {
+            $where[] = "$words < 10";
+        }
+        if (!empty($filters['min_words'])) {
+            // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- $words is a fixed SQL expression
+            $where[] = $wpdb->prepare("$words >= %d", $filters['min_words']);
+        }
+        if (!empty($filters['max_words'])) {
+            // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- $words is a fixed SQL expression
+            $where[] = $wpdb->prepare("$words <= %d", $filters['max_words']);
+        }
+
+        return implode(' AND ', $where);
+    }
+
+    private function is_valid_date($value) {
+        $date = DateTime::createFromFormat('Y-m-d', $value);
+        return $date && $date->format('Y-m-d') === $value;
+    }
+
     private function count_comments_by_filters($filters) {
         global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        // Status filter
-        if (isset($filters['status']) && is_array($filters['status'])) {
-            $statuses = array();
-            foreach ($filters['status'] as $status) {
-                if ($status === 'all') continue;
-                $statuses[] = $wpdb->prepare("comment_approved = %s", $status === 'approved' ? '1' : ($status === 'pending' ? '0' : $status));
-            }
-            if (!empty($statuses)) {
-                $where[] = '(' . implode(' OR ', $statuses) . ')';
-            }
-        }
-        
-        // Date range
-        if (!empty($filters['date_from'])) {
-            $where[] = $wpdb->prepare("comment_date >= %s", $filters['date_from'] . ' 00:00:00');
-        }
-        if (!empty($filters['date_to'])) {
-            $where[] = $wpdb->prepare("comment_date <= %s", $filters['date_to'] . ' 23:59:59');
-        }
-        
-        // Author filter
-        if (isset($filters['author']) && !empty($filters['author']) && $filters['author'] !== 'all') {
-            $author_email = sanitize_email($filters['author']);
-            if (is_email($author_email)) {
-                $where[] = $wpdb->prepare("comment_author_email = %s", $author_email);
-            }
-        }
-        
-        // Post type filter
-        if (isset($filters['post_type']) && is_array($filters['post_type']) && !in_array('all', $filters['post_type'])) {
-            // Sanitize post types
-            $post_types = array_map('sanitize_key', $filters['post_type']);
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed, caching not practical
-            $post_ids = $wpdb->get_col($wpdb->prepare(
-                "SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($post_types), '%s')) . ")",
-                ...$post_types
-            ));
-            if (!empty($post_ids)) {
-                $where[] = "comment_post_ID IN (" . implode(',', array_map('intval', $post_ids)) . ")";
-            } else {
-                return 0; // No posts found, so no comments
-            }
-        }
-        
-        // Additional filters
-        if (!empty($filters['has_url'])) {
-            $where[] = "comment_author_url != ''";
-        }
-        if (!empty($filters['no_url'])) {
-            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
-        }
-        
-        // Word count filters - sanitize inputs
-        if (!empty($filters['short_comments'])) {
-            $where[] = "LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 < 10";
-        }
-        if (!empty($filters['min_words'])) {
-            $min_words = intval($filters['min_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 >= %d", $min_words);
-        }
-        if (!empty($filters['max_words'])) {
-            $max_words = intval($filters['max_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 <= %d", $max_words);
-        }
-        
-        $where_clause = implode(' AND ', $where);
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-        return (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE $where_clause");
-    }
-    
-    private function delete_comments_by_filters($filters) {
+
+        $where = $this->build_where($filters);
+        if (false === $where) {
+            return 0;
+        }
+
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in build_where()
+        return (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE $where");
+    }
+
+    /**
+     * Apply the chosen action to up to one batch of matching comments.
+     *
+     * @return int Number of comments changed.
+     */
+    private function process_by_filters($filters) {
         global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        // Status filter
-        if (isset($filters['status']) && is_array($filters['status'])) {
-            $statuses = array();
-            foreach ($filters['status'] as $status) {
-                if ($status === 'all') continue;
-                $statuses[] = $wpdb->prepare("comment_approved = %s", $status === 'approved' ? '1' : ($status === 'pending' ? '0' : $status));
-            }
-            if (!empty($statuses)) {
-                $where[] = '(' . implode(' OR ', $statuses) . ')';
-            }
-        }
-        
-        // Date range
-        if (!empty($filters['date_from'])) {
-            $where[] = $wpdb->prepare("comment_date >= %s", $filters['date_from'] . ' 00:00:00');
-        }
-        if (!empty($filters['date_to'])) {
-            $where[] = $wpdb->prepare("comment_date <= %s", $filters['date_to'] . ' 23:59:59');
-        }
-        
-        // Author filter
-        if (isset($filters['author']) && !empty($filters['author']) && $filters['author'] !== 'all') {
-            $author_email = sanitize_email($filters['author']);
-            if (is_email($author_email)) {
-                $where[] = $wpdb->prepare("comment_author_email = %s", $author_email);
-            }
-        }
-        
-        // Post type filter
-        if (isset($filters['post_type']) && is_array($filters['post_type']) && !in_array('all', $filters['post_type'])) {
-            // Sanitize post types
-            $post_types = array_map('sanitize_key', $filters['post_type']);
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed, caching not practical
-            $post_ids = $wpdb->get_col($wpdb->prepare(
-                "SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($post_types), '%s')) . ")",
-                ...$post_types
-            ));
-            if (!empty($post_ids)) {
-                $where[] = "comment_post_ID IN (" . implode(',', array_map('intval', $post_ids)) . ")";
-            } else {
-                return 0; // No posts found, so no comments
-            }
-        }
-        
-        // Additional filters
-        if (!empty($filters['has_url'])) {
-            $where[] = "comment_author_url != ''";
-        }
-        if (!empty($filters['no_url'])) {
-            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
-        }
-        
-        // Word count filters - sanitize inputs
-        if (!empty($filters['short_comments'])) {
-            $where[] = "LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 < 10";
-        }
-        if (!empty($filters['min_words'])) {
-            $min_words = intval($filters['min_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 >= %d", $min_words);
-        }
-        if (!empty($filters['max_words'])) {
-            $max_words = intval($filters['max_words']);
-            $where[] = $wpdb->prepare("LENGTH(comment_content) - LENGTH(REPLACE(comment_content, ' ', '')) + 1 <= %d", $max_words);
-        }
-        
-        $where_clause = implode(' AND ', $where);
-        
-        // Get comment IDs and post IDs BEFORE deletion (WordPress standard way)
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-        $comments = $wpdb->get_results("SELECT comment_ID, comment_post_ID FROM $wpdb->comments WHERE $where_clause");
-        
-        if (empty($comments)) {
+
+        $where = $this->build_where($filters);
+        if (false === $where) {
             return 0;
         }
-        
-        $count = count($comments);
-        $comment_ids = array();
-        $post_ids = array();
-        
-        // Collect comment IDs and unique post IDs
-        foreach ($comments as $comment) {
-            $comment_ids[] = (int) $comment->comment_ID;
-            $post_ids[(int) $comment->comment_post_ID] = true;
-        }
-        
-        $post_ids = array_keys($post_ids);
-        
-        // Use WordPress function to properly delete comments and clean up
+
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in build_where()
+        $comment_ids = $wpdb->get_col($wpdb->prepare("SELECT comment_ID FROM $wpdb->comments WHERE $where ORDER BY comment_ID LIMIT %d", self::BATCH_SIZE));
+
+        // Recount each affected post once at the end instead of after every comment.
+        wp_defer_comment_counting(true);
+        $changed = 0;
         foreach ($comment_ids as $comment_id) {
-            wp_delete_comment($comment_id, true); // true = force delete (skip trash)
-        }
-        
-        // Clean up post comment counts
-        if (!empty($post_ids)) {
-            foreach ($post_ids as $post_id) {
-                clean_post_cache($post_id);
-                wp_update_comment_count_now($post_id);
-            }
-        }
-        
-        // Clear caches
-        wp_cache_flush();
-        delete_transient('ulticocl_comments_count');
-        
-        return (int) $count;
-    }
-    
+            if ($this->comment_action((int) $comment_id, $filters['clean_action'])) {
+                $changed++;
+            }
+        }
+        wp_defer_comment_counting(false);
+
+        return $changed;
+    }
+
     private function export_comments($filters) {
         global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        // Status filter
-        if (isset($filters['status']) && is_array($filters['status'])) {
-            $statuses = array();
-            foreach ($filters['status'] as $status) {
-                if ($status === 'all') continue;
-                $statuses[] = $wpdb->prepare("comment_approved = %s", $status === 'approved' ? '1' : ($status === 'pending' ? '0' : $status));
-            }
-            if (!empty($statuses)) {
-                $where[] = '(' . implode(' OR ', $statuses) . ')';
-            }
-        }
-        
-        // Date range
-        if (!empty($filters['date_from'])) {
-            $where[] = $wpdb->prepare("comment_date >= %s", $filters['date_from'] . ' 00:00:00');
-        }
-        if (!empty($filters['date_to'])) {
-            $where[] = $wpdb->prepare("comment_date <= %s", $filters['date_to'] . ' 23:59:59');
-        }
-        
-        // Author filter
-        if (isset($filters['author']) && !empty($filters['author']) && $filters['author'] !== 'all') {
-            $author_email = sanitize_email($filters['author']);
-            if (is_email($author_email)) {
-                $where[] = $wpdb->prepare("comment_author_email = %s", $author_email);
-            }
-        }
-        
-        // Post type filter
-        $comments = array();
-        if (isset($filters['post_type']) && is_array($filters['post_type']) && !in_array('all', $filters['post_type'])) {
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Direct query needed for post type filtering, caching not practical
-            $post_ids = $wpdb->get_col($wpdb->prepare(
-                "SELECT ID FROM $wpdb->posts WHERE post_type IN (" . implode(',', array_fill(0, count($filters['post_type']), '%s')) . ")",
-                ...$filters['post_type']
+
+        $where = $this->build_where($filters);
+
+        nocache_headers();
+        header('Content-Type: text/csv; charset=utf-8');
+        header('Content-Disposition: attachment; filename="comments-export-' . gmdate('Y-m-d') . '.csv"');
+
+        $output = fopen('php://output', 'w');
+        fputcsv($output, array('ID', 'Post ID', 'Author', 'Email', 'URL', 'Content', 'Date', 'Status'), ',', '"', '');
+
+        // Stream in chunks so large exports don't exhaust memory.
+        $last_id = 0;
+        while (false !== $where) {
+            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in build_where()
+            $comments = $wpdb->get_results($wpdb->prepare("SELECT comment_ID, comment_post_ID, comment_author, comment_author_email, comment_author_url, comment_content, comment_date, comment_approved FROM $wpdb->comments WHERE $where AND comment_ID > %d ORDER BY comment_ID LIMIT %d", $last_id, self::BATCH_SIZE));
+            if (empty($comments)) {
+                break;
+            }
+            foreach ($comments as $comment) {
+                fputcsv($output, array_map(array($this, 'csv_safe'), array_values((array) $comment)), ',', '"', '');
+                $last_id = $comment->comment_ID;
+            }
+        }
+
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose -- php://output is a special stream, not a file
+        fclose($output);
+        exit;
+    }
+
+    /**
+     * Prefix cells that a spreadsheet would run as a formula (CSV injection).
+     */
+    private function csv_safe($value) {
+        return preg_match('/^[=+\-@\t\r]/', (string) $value) ? "'" . $value : $value;
+    }
+
+    // ---------------------------------------------------------------------
+    // Smart rules
+    // ---------------------------------------------------------------------
+
+    private function get_rules() {
+        $rules = get_option('ulticocl_rules', array());
+        if (!is_array($rules)) {
+            return array();
+        }
+        foreach ($rules as $id => $rule) {
+            $rules[$id] = wp_parse_args($rule, ULTICOCL_Matcher::defaults());
+        }
+        return $rules;
+    }
+
+    /**
+     * Add to a per-rule counter ('hits' = comments caught, 'restored' = caught by mistake).
+     */
+    private function add_hits($rule_id, $n, $field = 'hits') {
+        if ($n < 1 || '' === $rule_id) {
+            return;
+        }
+        $state = get_option('ulticocl_rule_state', array());
+        $current = isset($state[$rule_id]) ? $state[$rule_id] : array();
+        $state[$rule_id] = array_merge(array('hits' => 0, 'cursor' => 0, 'last_run' => 0), $current);
+        $state[$rule_id][$field] = (isset($state[$rule_id][$field]) ? (int) $state[$rule_id][$field] : 0) + (int) $n;
+        update_option('ulticocl_rule_state', $state, false);
+    }
+
+    /**
+     * Daily counters behind the dashboard charts, kept for 120 days.
+     *
+     * @param string $type    'new' (caught on arrival), 'scan' (caught among existing comments) or 'restored'.
+     * @param int    $n       How many.
+     * @param string $rule_id Rule responsible, if any.
+     */
+    private function record_stat($type, $n, $rule_id = '') {
+        if ($n < 1) {
+            return;
+        }
+        $stats = get_option('ulticocl_stats', array());
+        $stats = is_array($stats) ? $stats : array();
+        $day = current_time('Y-m-d');
+        $row = isset($stats['days'][$day]) ? $stats['days'][$day] : array();
+        $row[$type] = (isset($row[$type]) ? (int) $row[$type] : 0) + (int) $n;
+        if ('' !== $rule_id && 'restored' !== $type) {
+            $row['r'][$rule_id] = (isset($row['r'][$rule_id]) ? (int) $row['r'][$rule_id] : 0) + (int) $n;
+        }
+        $stats['days'][$day] = $row;
+        if (count($stats['days']) > 120) {
+            ksort($stats['days']);
+            $stats['days'] = array_slice($stats['days'], -120, null, true);
+        }
+        update_option('ulticocl_stats', $stats, false);
+    }
+
+    /**
+     * WHERE fragment limiting a rule scan to the comments it may touch: managed types,
+     * the chosen statuses (never trash or quarantine) and the minimum age.
+     */
+    private function rule_scope_where($rule) {
+        global $wpdb;
+
+        $statuses = array();
+        foreach ((array) $rule['status'] as $status) {
+            if (in_array($status, ULTICOCL_Matcher::RULE_STATUSES, true)) {
+                $statuses[] = self::STATUS_MAP[$status];
+            }
+        }
+        if (!$statuses) {
+            $statuses = array('1', '0', 'spam');
+        }
+        $where = $this->types_sql() . ' AND ' . $wpdb->prepare('comment_approved IN (' . implode(',', array_fill(0, count($statuses), '%s')) . ')', $statuses);
+        if (!empty($rule['older_than'])) {
+            $where .= $wpdb->prepare(' AND comment_date_gmt < %s', gmdate('Y-m-d H:i:s', time() - absint($rule['older_than']) * DAY_IN_SECONDS));
+        }
+        // Comments restored from quarantine are marked as fine and never caught again.
+        $where .= " AND NOT EXISTS (SELECT 1 FROM $wpdb->commentmeta ok WHERE ok.comment_id = $wpdb->comments.comment_ID AND ok.meta_key = '_ulticocl_ok')";
+        return $where;
+    }
+
+    private function count_scope($rule) {
+        global $wpdb;
+        $where = $this->rule_scope_where($rule);
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in rule_scope_where()
+        return (int) $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->comments WHERE $where");
+    }
+
+    /**
+     * Check one chunk of existing comments against a rule and, unless $dry, apply its action.
+     *
+     * ponytail: comments are matched in PHP (regex, Unicode scripts) in chunks of BATCH_SIZE by ID.
+     * A full pass over ~100k comments takes a few cron runs; add a SQL pre-filter if that is too slow.
+     *
+     * @return array|WP_Error scanned, matched, acted, cursor, done, samples, ids
+     */
+    private function scan_rule($rule, $cursor, $limit, $dry, $rule_id = '') {
+        global $wpdb;
+
+        $rule = wp_parse_args($rule, ULTICOCL_Matcher::defaults());
+        if (!ULTICOCL_Matcher::scope_is_safe($rule)) {
+            return new WP_Error('unsafe', __('This rule has no checks and no minimum age, so it was skipped to protect your comments. Edit the rule to continue.', 'ultimate-comment-cleaner'));
+        }
+
+        $where = $this->rule_scope_where($rule);
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where is assembled from prepared fragments in rule_scope_where()
+        $rows = $wpdb->get_results($wpdb->prepare("SELECT comment_ID, comment_post_ID, comment_author, comment_author_email, comment_author_url, comment_content, comment_approved, user_id FROM $wpdb->comments WHERE comment_ID > %d AND $where ORDER BY comment_ID LIMIT %d", $cursor, $limit));
+
+        $result = array('scanned' => count($rows), 'matched' => 0, 'acted' => 0, 'cursor' => $cursor, 'done' => count($rows) < $limit, 'samples' => array(), 'ids' => array());
+
+        if (!$dry) {
+            wp_defer_comment_counting(true);
+        }
+        foreach ($rows as $row) {
+            $result['cursor'] = (int) $row->comment_ID;
+            if ($this->is_protected($row)) {
+                continue;
+            }
+            $reason = ULTICOCL_Matcher::evaluate($rule, $row);
+            if (false === $reason) {
+                continue;
+            }
+            if ('' === $reason) {
+                $reason = __('Matched the age and status of the rule', 'ultimate-comment-cleaner');
+            }
+            $result['matched']++;
+            if (count($result['samples']) < 5) {
+                $result['samples'][] = array(
+                    'author'  => $row->comment_author,
+                    'excerpt' => wp_trim_words(wp_strip_all_tags($row->comment_content), 18),
+                    'reason'  => $reason,
+                );
+            }
+            if ($dry) {
+                $result['ids'][] = (int) $row->comment_ID;
+            } elseif ($this->apply_rule_action($row, $rule, $reason, null, $rule_id)) {
+                $result['acted']++;
+            }
+        }
+        if (!$dry) {
+            wp_defer_comment_counting(false);
+        }
+
+        return $result;
+    }
+
+    private function apply_rule_action($comment, $rule, $reason, $previous_status = null, $rule_id = '') {
+        switch ($rule['action']) {
+            case 'delete':
+                return (bool) wp_delete_comment((int) $comment->comment_ID, true);
+            case 'spam':
+                return 'spam' === (string) $comment->comment_approved ? false : (bool) wp_spam_comment((int) $comment->comment_ID);
+            default:
+                return $this->quarantine($comment, $rule['name'], $reason, $previous_status, $rule_id);
+        }
+    }
+
+    /**
+     * Commenters rules must never touch: moderators and the allowlist from Settings.
+     *
+     * @param object|array $comment Comment row or comment data.
+     */
+    private function is_protected($comment) {
+        static $moderators = array();
+        $c = (array) $comment;
+
+        $user_id = isset($c['user_id']) ? (int) $c['user_id'] : 0;
+        if ($user_id) {
+            if (!isset($moderators[$user_id])) {
+                $moderators[$user_id] = user_can($user_id, 'moderate_comments');
+            }
+            if ($moderators[$user_id]) {
+                return true;
+            }
+        }
+
+        $email = isset($c['comment_author_email']) ? strtolower(trim($c['comment_author_email'])) : '';
+        if ('' === $email) {
+            return false;
+        }
+        foreach (preg_split('/\r\n|\r|\n/', strtolower($this->get_settings()['allowlist']), -1, PREG_SPLIT_NO_EMPTY) as $entry) {
+            $entry = trim($entry);
+            if ('' === $entry) {
+                continue;
+            }
+            if ($entry === $email || ('@' === $entry[0] && substr($email, -strlen($entry)) === $entry)) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    // ---------------------------------------------------------------------
+    // New comments
+    // ---------------------------------------------------------------------
+
+    /**
+     * Filter on pre_comment_approved: hold back a new comment that a rule flags.
+     * It is saved as spam first, which keeps notification emails quiet, then
+     * after_new_comment() applies the rule's real action.
+     */
+    public function screen_new_comment($approved, $commentdata) {
+        $this->pending = null;
+
+        if (is_wp_error($approved) || 'spam' === $approved || !is_array($commentdata)) {
+            return $approved;
+        }
+        $type = isset($commentdata['comment_type']) ? $commentdata['comment_type'] : '';
+        if ('' !== $type && !in_array($type, self::TYPES, true)) {
+            return $approved;
+        }
+        if ($this->is_protected($commentdata)) {
+            return $approved;
+        }
+
+        foreach ($this->get_rules() as $id => $rule) {
+            if (empty($rule['active']) || 'existing' === $rule['scope'] || !ULTICOCL_Matcher::has_signals($rule)) {
+                continue;
+            }
+            $reason = ULTICOCL_Matcher::evaluate($rule, $commentdata);
+            if (false !== $reason) {
+                $this->pending = array($id, $rule, $reason);
+                return 'spam';
+            }
+        }
+        return $approved;
+    }
+
+    /**
+     * Action comment_post: finish handling a comment that screen_new_comment() flagged.
+     */
+    public function after_new_comment($comment_id) {
+        if (null === $this->pending) {
+            return;
+        }
+        list($id, $rule, $reason) = $this->pending;
+        $this->pending = null;
+
+        $comment = get_comment((int) $comment_id);
+        if (!$comment) {
+            return;
+        }
+        // Deleting now would pull the comment out from under core and other plugins that are
+        // still handling it. It is already saved as spam, so it stays hidden until shutdown.
+        if ('delete' === $rule['action']) {
+            if (!$this->deferred_deletes) {
+                add_action('shutdown', array($this, 'delete_deferred_comments'));
+            }
+            $this->deferred_deletes[] = (int) $comment_id;
+            $this->add_hits($id, 1);
+            $this->record_stat('new', 1, $id);
+            return;
+        }
+        // A new comment would have waited for moderation, so that is where a restore puts it back.
+        if ($this->apply_rule_action($comment, $rule, $reason, '0', $id) || 'spam' === $rule['action']) {
+            $this->add_hits($id, 1);
+            $this->record_stat('new', 1, $id);
+        }
+    }
+
+    // ---------------------------------------------------------------------
+    // Quarantine
+    // ---------------------------------------------------------------------
+
+    /**
+     * Action shutdown: delete new comments that a "delete" rule flagged.
+     */
+    public function delete_deferred_comments() {
+        foreach ($this->deferred_deletes as $comment_id) {
+            wp_delete_comment($comment_id, true);
+        }
+        $this->deferred_deletes = array();
+    }
+
+    private function status_name($status) {
+        $names = array('1' => 'approved', '0' => 'unapproved');
+        return isset($names[$status]) ? $names[$status] : $status;
+    }
+
+    /**
+     * Change comment_approved to any value, including our own quarantine status that
+     * the core status functions refuse. Fires the usual transition hooks.
+     */
+    private function set_status($comment, $new) {
+        global $wpdb;
+
+        $comment = get_comment($comment);
+        if (!$comment) {
+            return false;
+        }
+        $old = (string) $comment->comment_approved;
+        if ($old === $new) {
+            return true;
+        }
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- Core cannot set a custom comment status.
+        if (false === $wpdb->update($wpdb->comments, array('comment_approved' => $new), array('comment_ID' => (int) $comment->comment_ID))) {
+            return false;
+        }
+        clean_comment_cache((int) $comment->comment_ID);
+        wp_update_comment_count((int) $comment->comment_post_ID);
+        wp_transition_comment_status($this->status_name($new), $this->status_name($old), get_comment((int) $comment->comment_ID));
+        return true;
+    }
+
+    /**
+     * Hide a comment in quarantine, remembering why and what it was before.
+     */
+    private function quarantine($comment, $source, $reason, $previous_status = null, $rule_id = '') {
+        $comment = get_comment($comment);
+        if (!$comment || self::QUARANTINE === (string) $comment->comment_approved) {
+            return false;
+        }
+        $previous = null === $previous_status ? (string) $comment->comment_approved : $previous_status;
+        if (!$this->set_status($comment, self::QUARANTINE)) {
+            return false;
+        }
+        update_comment_meta((int) $comment->comment_ID, '_ulticocl_q_time', time());
+        update_comment_meta((int) $comment->comment_ID, '_ulticocl_q', array('prev' => $previous, 'source' => $source, 'reason' => $reason, 'rule' => $rule_id));
+        return true;
+    }
+
+    private function restore($comment) {
+        $comment = get_comment($comment);
+        if (!$comment || self::QUARANTINE !== (string) $comment->comment_approved) {
+            return false;
+        }
+        $info = get_comment_meta((int) $comment->comment_ID, '_ulticocl_q', true);
+        $previous = is_array($info) && isset($info['prev']) ? (string) $info['prev'] : '0';
+        if (!in_array($previous, array('1', '0', 'spam'), true)) {
+            $previous = '0';
+        }
+        if (!$this->set_status($comment, $previous)) {
+            return false;
+        }
+        $this->clear_quarantine_meta((int) $comment->comment_ID);
+        // The admin just said this one is fine, so scheduled rules must not catch it again.
+        update_comment_meta((int) $comment->comment_ID, '_ulticocl_ok', 1);
+        // A restore means the rule caught a good comment: count it against the rule's accuracy.
+        if (is_array($info) && !empty($info['rule'])) {
+            $this->add_hits($info['rule'], 1, 'restored');
+        }
+        $this->record_stat('restored', 1);
+        return true;
+    }
+
+    private function clear_quarantine_meta($comment_id) {
+        delete_comment_meta($comment_id, '_ulticocl_q');
+        delete_comment_meta($comment_id, '_ulticocl_q_time');
+    }
+
+    /**
+     * Delete quarantined comments older than the retention set in Settings (daily cron).
+     */
+    public function purge_quarantine() {
+        $days = (int) $this->get_settings()['quarantine_days'];
+        if ($days < 1) {
+            return;
+        }
+        $cutoff = time() - $days * DAY_IN_SECONDS;
+        $start = time();
+        $purged = 0;
+        do {
+            $ids = get_comments(array(
+                'status'     => self::QUARANTINE,
+                'fields'     => 'ids',
+                'number'     => self::BATCH_SIZE,
+                'orderby'    => 'comment_ID',
+                // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query -- Small, daily, batched query on the quarantine only.
+                'meta_query' => array(array('key' => '_ulticocl_q_time', 'value' => $cutoff, 'compare' => '<', 'type' => 'NUMERIC')),
             ));
-            if (!empty($post_ids)) {
-                $where[] = "comment_post_ID IN (" . implode(',', array_map('intval', $post_ids)) . ")";
-            } else {
-                // No posts found, so no comments - will export empty array
-            }
-        }
-        
-        // Additional filters
-        if (!empty($filters['has_url'])) {
-            $where[] = "comment_author_url != ''";
-        }
-        if (!empty($filters['no_url'])) {
-            $where[] = "(comment_author_url = '' OR comment_author_url IS NULL)";
-        }
-        
-        // Only query if we have valid where conditions
-        if (!empty($where)) {
-            $where_clause = implode(' AND ', $where);
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-            $comments = $wpdb->get_results("SELECT * FROM $wpdb->comments WHERE $where_clause");
-        }
-        
-        header('Content-Type: text/csv');
-        header('Content-Disposition: attachment; filename="comments-export-' . gmdate('Y-m-d') . '.csv"');
-        
-        $output = fopen('php://output', 'w');
-        fputcsv($output, array('ID', 'Post ID', 'Author', 'Email', 'URL', 'Content', 'Date', 'Status'));
-        
-        foreach ($comments as $comment) {
-            fputcsv($output, array(
-                $comment->comment_ID,
-                $comment->comment_post_ID,
-                $comment->comment_author,
-                $comment->comment_author_email,
-                $comment->comment_author_url,
-                $comment->comment_content,
-                $comment->comment_date,
-                $comment->comment_approved
-            ));
-        }
-        
-        if (is_resource($output)) {
-            // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose -- php://output is a special stream, not a file
-            fclose($output);
-        }
+            wp_defer_comment_counting(true);
+            foreach ($ids as $id) {
+                if (wp_delete_comment((int) $id, true)) {
+                    $purged++;
+                }
+            }
+            wp_defer_comment_counting(false);
+        } while (count($ids) === self::BATCH_SIZE && time() - $start < self::CRON_BUDGET);
+
+        if ($purged > 0) {
+            /* translators: 1: number of comments, 2: number of days */
+            $this->log_activity(sprintf(_n('Deleted %1$d quarantined comment older than %2$d days', 'Deleted %1$d quarantined comments older than %2$d days', $purged, 'ultimate-comment-cleaner'), $purged, $days));
+        }
+    }
+
+    // ---------------------------------------------------------------------
+    // Comment list actions (row links and bulk actions)
+    // ---------------------------------------------------------------------
+
+    /**
+     * Apply one action to one comment. Only managed comment types can be touched.
+     */
+    private function comment_action($id, $action) {
+        $comment = get_comment((int) $id);
+        if (!$comment || !in_array($comment->comment_type, array_merge(self::TYPES, array('')), true)) {
+            return false;
+        }
+        $id = (int) $comment->comment_ID;
+        $quarantined = self::QUARANTINE === (string) $comment->comment_approved;
+
+        switch ($action) {
+            case 'approve':
+                $ok = $quarantined ? $this->set_status($comment, '1') : wp_set_comment_status($id, 'approve');
+                break;
+            case 'unapprove':
+                $ok = $quarantined ? $this->set_status($comment, '0') : wp_set_comment_status($id, 'hold');
+                break;
+            case 'spam':
+                $ok = $quarantined ? $this->set_status($comment, 'spam') : wp_spam_comment($id);
+                break;
+            case 'quarantine':
+                return $this->quarantine($comment, __('Moved manually', 'ultimate-comment-cleaner'), '');
+            case 'restore':
+                return $this->restore($comment);
+            case 'delete':
+                return (bool) wp_delete_comment($id, true);
+            default:
+                return false;
+        }
+        if ($ok && $quarantined) {
+            $this->clear_quarantine_meta($id);
+        }
+        return (bool) $ok;
+    }
+
+    /**
+     * admin_init: handle a row link or a bulk action from the comment lists.
+     */
+    public function handle_comment_actions() {
+        // phpcs:disable WordPress.Security.NonceVerification -- Both paths below call check_admin_referer().
+        if (!isset($_GET['page']) || 'ultimate-comment-cleaner' !== $_GET['page']) {
+            return;
+        }
+
+        $ids = array();
+        $action = '';
+        if (!empty($_GET['ulticocl_do']) && isset($_GET['c'])) {
+            $action = sanitize_key(wp_unslash($_GET['ulticocl_do']));
+            $ids = array(absint($_GET['c']));
+            check_admin_referer('ulticocl_row_' . $action . '_' . $ids[0]);
+        } elseif (isset($_SERVER['REQUEST_METHOD']) && 'POST' === $_SERVER['REQUEST_METHOD'] && isset($_POST['ids']) && is_array($_POST['ids'])) {
+            foreach (array('action', 'action2') as $key) {
+                if (empty($action) && !empty($_POST[$key]) && '-1' !== $_POST[$key]) {
+                    $action = sanitize_key(wp_unslash($_POST[$key]));
+                }
+            }
+            check_admin_referer('bulk-ulticocl_comments');
+            $ids = array_filter(array_map('absint', wp_unslash($_POST['ids'])));
+        } else {
+            return;
+        }
+        // phpcs:enable WordPress.Security.NonceVerification
+
+        if (!current_user_can('manage_options')) {
+            wp_die(esc_html__('You do not have sufficient permissions to perform this action.', 'ultimate-comment-cleaner'));
+        }
+
+        $url = remove_query_arg(array('ulticocl_do', 'c', '_wpnonce', '_wp_http_referer', 'action', 'action2', 'ulticocl_notice', 'ulticocl_n', 'ulticocl_a'), isset($_POST['_wp_http_referer']) ? wp_unslash($_POST['_wp_http_referer']) : (isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : '')); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized,WordPress.Security.NonceVerification -- Only used as a redirect target after wp_safe_redirect() validation.
+
+        if (in_array($action, self::COMMENT_ACTIONS, true) && $ids) {
+            $done = 0;
+            wp_defer_comment_counting(true);
+            foreach ($ids as $id) {
+                if ($this->comment_action($id, $action)) {
+                    $done++;
+                }
+            }
+            wp_defer_comment_counting(false);
+            $url = add_query_arg(array('ulticocl_notice' => 1, 'ulticocl_n' => $done, 'ulticocl_a' => $action), $url);
+        }
+
+        wp_safe_redirect($url ? $url : admin_url('tools.php?page=ultimate-comment-cleaner&tab=manage'));
         exit;
     }
-    
-    public function check_triggers() {
-        $triggers = get_option('ulticocl_triggers', array());
-        
-        foreach ($triggers as $id => $trigger) {
-            if (!$trigger['active']) continue;
-            
-            $last_run = isset($trigger['last_run']) ? strtotime($trigger['last_run']) : 0;
-            $schedule_interval = $this->get_schedule_interval($trigger['schedule']);
-            
-            if (time() - $last_run >= $schedule_interval) {
-                $this->execute_trigger($id, $trigger);
-            }
-        }
-    }
-    
-    private function execute_trigger($trigger_id, $trigger) {
-        global $wpdb;
-        
-        $where = array("comment_type = 'comment'");
-        
-        if ($trigger['status'] === 'approved') {
-            $where[] = "comment_approved = '1'";
-        } elseif ($trigger['status'] === 'pending') {
-            $where[] = "comment_approved = '0'";
-        } elseif ($trigger['status'] === 'spam') {
-            $where[] = "comment_approved = 'spam'";
-        }
-        
-        if (!empty($trigger['older_than'])) {
-            $date = gmdate('Y-m-d H:i:s', strtotime('-' . intval($trigger['older_than']) . ' days'));
-            $where[] = $wpdb->prepare("comment_date < %s", $date);
-        }
-        
-        $where_clause = implode(' AND ', $where);
-        
-        // Get comment IDs before deletion
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $where_clause is built from validated/sanitized inputs
-        $comment_ids = $wpdb->get_col("SELECT comment_ID FROM $wpdb->comments WHERE $where_clause");
-        
-        if (empty($comment_ids)) {
+
+    // ---------------------------------------------------------------------
+    // Scheduled runs
+    // ---------------------------------------------------------------------
+
+    /**
+     * Hourly cron: continue or start scans for rules that apply to existing comments.
+     */
+    public function run_scheduled_rules() {
+        $rules = $this->get_rules();
+        $state = get_option('ulticocl_rule_state', array());
+        $start = time();
+
+        foreach ($rules as $id => $rule) {
+            if (empty($rule['active']) || 'new' === $rule['scope'] || !ULTICOCL_Matcher::scope_is_safe($rule)) {
+                continue;
+            }
+            if (time() - $start >= self::CRON_BUDGET) {
+                break;
+            }
+            $st = wp_parse_args(isset($state[$id]) ? $state[$id] : array(), array('hits' => 0, 'cursor' => 0, 'last_run' => 0));
+            // A scan in progress carries on; otherwise wait for the schedule (5 minutes of slack for hourly cron drift).
+            if (0 === (int) $st['cursor'] && time() - (int) $st['last_run'] < $this->get_schedule_interval($rule['schedule']) - 5 * MINUTE_IN_SECONDS) {
+                continue;
+            }
+
+            $acted = 0;
+            do {
+                $result = $this->scan_rule($rule, (int) $st['cursor'], self::BATCH_SIZE, false, $id);
+                if (is_wp_error($result)) {
+                    break;
+                }
+                $st['cursor'] = $result['done'] ? 0 : $result['cursor'];
+                $acted += $result['acted'];
+            } while (!$result['done'] && time() - $start < self::CRON_BUDGET);
+
+            if (!is_wp_error($result) && $result['done']) {
+                $st['last_run'] = time();
+            }
+            $st['hits'] += $acted;
+            $state[$id] = $st;
+            $this->record_stat('scan', $acted, $id);
+
+            if ($acted > 0) {
+                /* translators: 1: rule name, 2: result sentence */
+                $this->log_activity(sprintf(__('Rule "%1$s": %2$s', 'ultimate-comment-cleaner'), $rule['name'], $this->action_message($rule['action'], $acted)));
+                $this->send_email_notification($acted, $rule['name'], $rule['action']);
+            }
+        }
+        update_option('ulticocl_rule_state', $state, false);
+    }
+
+    public function get_settings() {
+        return wp_parse_args(get_option('ulticocl_settings', array()), array(
+            'enable_logging' => 1,
+            'send_email_notifications' => 0,
+            'notification_email' => get_option('admin_email'),
+            'quarantine_days' => 14,
+            'allowlist' => '',
+        ));
+    }
+
+    private function send_email_notification($count, $source = 'manual', $action = 'delete') {
+        $settings = $this->get_settings();
+
+        if (empty($settings['send_email_notifications']) || $count < 1) {
             return;
         }
-        
-        $deleted = 0;
-        // Use WordPress function to properly delete comments
-        foreach ($comment_ids as $comment_id) {
-            if (wp_delete_comment($comment_id, true)) {
-                $deleted++;
-            }
-        }
-        
-        // Update trigger last run
-        $triggers = get_option('ulticocl_triggers', array());
-        $triggers[$trigger_id]['last_run'] = current_time('mysql');
-        update_option('ulticocl_triggers', $triggers);
-        
-        // Clear caches
-        wp_cache_flush();
-        delete_transient('ulticocl_comments_count');
-        
-        // translators: %1$s: trigger name, %2$d: number of comments deleted
-        $this->log_activity(sprintf(__('Trigger "%1$s" deleted %2$d comments', 'ultimate-comment-cleaner'), $trigger['name'], $deleted));
-        $this->send_email_notification($deleted, $trigger['name']);
-    }
-    
-    private function send_email_notification($count, $source = 'manual') {
-        $settings = get_option('ulticocl_settings', array());
-        
-        // Only send if notifications are enabled
-        if (!isset($settings['send_email_notifications']) || !$settings['send_email_notifications']) {
-            return;
-        }
-        
-        // Get notification email address
-        $email = isset($settings['notification_email']) && !empty($settings['notification_email']) 
-            ? $settings['notification_email'] 
-            : get_option('admin_email');
-        
+
+        $email = !empty($settings['notification_email']) ? $settings['notification_email'] : get_option('admin_email');
+
         if (empty($email) || !is_email($email)) {
             return;
         }
-        
-        // Prepare email
+
         // translators: %s: Site name.
-        $subject = sprintf(__('[%s] Comments Deleted', 'ultimate-comment-cleaner'), get_bloginfo('name'));
-        
-        // translators: %d: Number of comments deleted.
-        $message = sprintf(
-            // translators: %d: Number of comments deleted.
-            __('%d comment(s) have been deleted from your website.', 'ultimate-comment-cleaner'),
-            $count
+        $subject = sprintf(__('[%s] Comments Cleaned', 'ultimate-comment-cleaner'), get_bloginfo('name'));
+
+        $sentences = array(
+            /* translators: %d: number of comments */
+            'delete'     => _n('%d comment has been deleted from your website.', '%d comments have been deleted from your website.', $count, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'quarantine' => _n('%d comment has been moved to quarantine on your website.', '%d comments have been moved to quarantine on your website.', $count, 'ultimate-comment-cleaner'),
+            /* translators: %d: number of comments */
+            'spam'       => _n('%d comment has been marked as spam on your website.', '%d comments have been marked as spam on your website.', $count, 'ultimate-comment-cleaner'),
         );
-        
+        $message = sprintf(isset($sentences[$action]) ? $sentences[$action] : $sentences['delete'], $count);
+
         if ($source !== 'manual') {
-            // translators: %s: trigger name
-            $message .= "\n\n" . sprintf(__('Source: Auto Trigger "%s"', 'ultimate-comment-cleaner'), $source);
+            // translators: %s: rule name
+            $message .= "\n\n" . sprintf(__('Source: Smart Rule "%s"', 'ultimate-comment-cleaner'), $source);
         } else {
-            $message .= "\n\n" . __('Source: Manual deletion', 'ultimate-comment-cleaner');
-        }
-        
+            $message .= "\n\n" . __('Source: Manual clean-up', 'ultimate-comment-cleaner');
+        }
+
         // translators: %s: current time
         $message .= "\n\n" . sprintf(__('Time: %s', 'ultimate-comment-cleaner'), current_time('mysql'));
         $message .= "\n\n" . __('This is an automated notification from Ultimate Comment Cleaner plugin.', 'ultimate-comment-cleaner');
-        
-        // Send email
+
         wp_mail($email, $subject, $message);
     }
-    
+
     private function get_schedule_interval($schedule) {
         switch ($schedule) {
@@ -1208 +2170 @@
             case 'daily': return DAY_IN_SECONDS;
             case 'weekly': return WEEK_IN_SECONDS;
-            default: return HOUR_IN_SECONDS;
-        }
-    }
-    
+            default: return DAY_IN_SECONDS;
+        }
+    }
+
     private function log_activity($message) {
-        $settings = get_option('ulticocl_settings', array());
-        
-        // Only log if logging is enabled
-        if (isset($settings['enable_logging']) && $settings['enable_logging']) {
+        $settings = $this->get_settings();
+
+        if (!empty($settings['enable_logging'])) {
             $activities = get_option('ulticocl_activity_log', array());
             $activities[] = array(
@@ -1222 +2183 @@
                 'message' => $message
             );
-            update_option('ulticocl_activity_log', array_slice($activities, -100)); // Keep last 100
-        }
-    }
-    
+            update_option('ulticocl_activity_log', array_slice($activities, -100), false); // Keep last 100
+        }
+    }
+
+    /**
+     * Save settings from $_POST. Callers must verify the nonce and capability first.
+     */
+    private function save_settings_from_post() {
+        // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce verified by callers.
+        $notification_email = isset($_POST['notification_email']) ? sanitize_email(wp_unslash($_POST['notification_email'])) : '';
+        $current = $this->get_settings();
+
+        // One email address or @domain per line.
+        $allowlist = array();
+        if (isset($_POST['allowlist'])) {
+            foreach (preg_split('/\r\n|\r|\n/', sanitize_textarea_field(wp_unslash($_POST['allowlist']))) as $line) {
+                $line = strtolower(trim($line));
+                if (is_email($line) || preg_match('/^@?[a-z0-9-]+(\.[a-z0-9-]+)+$/', $line)) {
+                    $allowlist[] = $line;
+                }
+            }
+        }
+
+        $settings = array(
+            'enable_logging' => empty($_POST['enable_logging']) ? 0 : 1,
+            'send_email_notifications' => empty($_POST['send_email_notifications']) ? 0 : 1,
+            'notification_email' => $notification_email ? $notification_email : get_option('admin_email'),
+            'quarantine_days' => isset($_POST['quarantine_days']) ? min(365, absint($_POST['quarantine_days'])) : (int) $current['quarantine_days'],
+            'allowlist' => isset($_POST['allowlist']) ? implode("\n", array_unique($allowlist)) : $current['allowlist'],
+        );
+        // phpcs:enable WordPress.Security.NonceVerification.Missing
+
+        update_option('ulticocl_settings', $settings);
+        $this->log_activity(__('Settings updated', 'ultimate-comment-cleaner'));
+    }
+
     public function handle_settings_save() {
         if (!isset($_POST['ulticocl_action']) || sanitize_text_field(wp_unslash($_POST['ulticocl_action'])) !== 'save_settings') {
             return;
         }
-        
+
         if (!current_user_can('manage_options')) {
             wp_die(esc_html__('You do not have sufficient permissions to perform this action.', 'ultimate-comment-cleaner'));
         }
-        
+
         if (!isset($_POST['ulticocl_settings_nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['ulticocl_settings_nonce'])), 'ulticocl_save_settings')) {
             wp_die(esc_html__('Security check failed.', 'ultimate-comment-cleaner'));
         }
-        
-        $notification_email = isset($_POST['notification_email']) ? sanitize_email(wp_unslash($_POST['notification_email'])) : '';
-        if (empty($notification_email)) {
-            $notification_email = get_option('admin_email');
-        }
-        
-        $settings = array(
-            'enable_logging' => isset($_POST['enable_logging']) ? 1 : 0,
-            'send_email_notifications' => isset($_POST['send_email_notifications']) ? 1 : 0,
-            'notification_email' => $notification_email
-        );
-        
-        update_option('ulticocl_settings', $settings);
-        
-        // Log settings update if logging is enabled (check before update)
-        $old_settings = get_option('rc_settings', array());
-        if (isset($old_settings['enable_logging']) && $old_settings['enable_logging']) {
-            $this->log_activity(__('Settings updated', 'ultimate-comment-cleaner'));
-        }
-        
-        // Redirect back to settings tab with success message
+
+        $this->save_settings_from_post();
+
         wp_safe_redirect(add_query_arg(array(
             'page' => 'ultimate-comment-cleaner',
@@ -1266 +2241 @@
         exit;
     }
-    
+
     public function ajax_save_settings() {
         check_ajax_referer('ulticocl_nonce', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
             wp_send_json_error(array('message' => __('Insufficient permissions.', 'ultimate-comment-cleaner')));
         }
-        
-        $notification_email = isset($_POST['notification_email']) ? sanitize_email(wp_unslash($_POST['notification_email'])) : '';
-        if (empty($notification_email)) {
-            $notification_email = get_option('admin_email');
-        }
-        
-        $settings = array(
-            'enable_logging' => isset($_POST['enable_logging']) ? 1 : 0,
-            'send_email_notifications' => isset($_POST['send_email_notifications']) ? 1 : 0,
-            'notification_email' => $notification_email
-        );
-        
-        update_option('ulticocl_settings', $settings);
-        
-        // Log settings update if logging is enabled (check after update)
-        if ($settings['enable_logging']) {
-            $this->log_activity(__('Settings updated', 'ultimate-comment-cleaner'));
-        }
-        
+
+        $this->save_settings_from_post();
+
         wp_send_json_success(array('message' => __('Settings saved successfully.', 'ultimate-comment-cleaner')));
     }
-    
+
+    /**
+     * Upgrade data from earlier versions (runs once). Version 1.0 "Auto Triggers" become
+     * Smart Rules that delete exactly as before. A trigger that could have deleted every
+     * approved or pending comment is imported switched off.
+     */
+    public function maybe_upgrade() {
+        if (version_compare((string) get_option('ulticocl_db_version', '0'), '1.1.0', '>=')) {
+            return;
+        }
+
+        $triggers = get_option('ulticocl_triggers', array());
+        if (is_array($triggers) && $triggers && !get_option('ulticocl_rules')) {
+            $rules = array();
+            $state = array();
+            $disabled = 0;
+            foreach ($triggers as $old_id => $trigger) {
+                $status = isset($trigger['status']) && in_array($trigger['status'], ULTICOCL_Matcher::RULE_STATUSES, true) ? $trigger['status'] : 'approved';
+                $schedule = isset($trigger['schedule']) && in_array($trigger['schedule'], self::SCHEDULES, true) ? $trigger['schedule'] : 'daily';
+                $rule = array_merge(ULTICOCL_Matcher::defaults(), array(
+                    'name'       => !empty($trigger['name']) ? sanitize_text_field($trigger['name']) : __('Imported trigger', 'ultimate-comment-cleaner'),
+                    'active'     => !empty($trigger['active']),
+                    'scope'      => 'existing',
+                    'action'     => 'delete',
+                    'status'     => array($status),
+                    'older_than' => isset($trigger['older_than']) ? absint($trigger['older_than']) : 0,
+                    'schedule'   => $schedule,
+                    'created'    => !empty($trigger['created']) ? $trigger['created'] : current_time('mysql'),
+                ));
+                if ($rule['active'] && !ULTICOCL_Matcher::scope_is_safe($rule)) {
+                    $rule['active'] = false;
+                    $disabled++;
+                }
+                $id = '' === (string) $old_id ? uniqid('rule_') : sanitize_key($old_id);
+                $rules[$id] = $rule;
+                $state[$id] = array('hits' => 0, 'cursor' => 0, 'last_run' => !empty($trigger['last_run']) ? (int) get_gmt_from_date($trigger['last_run'], 'U') : 0);
+            }
+            update_option('ulticocl_rules', $rules, false);
+            update_option('ulticocl_rule_state', $state, false);
+            /* translators: %d: number of rules */
+            $this->log_activity(sprintf(_n('Imported %d Auto Trigger as a Smart Rule', 'Imported %d Auto Triggers as Smart Rules', count($rules), 'ultimate-comment-cleaner'), count($rules)));
+            if ($disabled) {
+                /* translators: %d: number of rules */
+                $this->log_activity(sprintf(_n('%d imported rule was switched off because it had no age limit. Review it in Smart Rules.', '%d imported rules were switched off because they had no age limit. Review them in Smart Rules.', $disabled, 'ultimate-comment-cleaner'), $disabled));
+            }
+        }
+        delete_option('ulticocl_triggers');
+        wp_clear_scheduled_hook('ulticocl_check_triggers');
+        update_option('ulticocl_db_version', '1.1.0');
+    }
+
     /**
      * Add settings link to plugin action links
      */
     public function add_plugin_action_links($links) {
-        $settings_link = '<a href="' . admin_url('tools.php?page=ultimate-comment-cleaner') . '">' . esc_html__('Settings', 'ultimate-comment-cleaner') . '</a>';
+        $settings_link = '<a href="' . esc_url(admin_url('tools.php?page=ultimate-comment-cleaner')) . '">' . esc_html__('Settings', 'ultimate-comment-cleaner') . '</a>';
         array_unshift($links, $settings_link);
         return $links;
@@ -1311 +2320 @@
 add_action('plugins_loaded', 'ulticocl_init');
 
+// Stop the scheduled jobs when the plugin is deactivated.
+register_deactivation_hook(__FILE__, function () {
+    wp_clear_scheduled_hook('ulticocl_run_rules');
+    wp_clear_scheduled_hook('ulticocl_purge_quarantine');
+});