Glossary

Glossary

API facade

A stable front-door API surface that keeps frontend code decoupled from upstream implementation details.

Envelope

The normalized API response wrapper used by contracts and docs:

• Success envelope includes data and metadata.
• Error envelope includes error and metadata.

Correlation ID

A request identifier used to trace a single flow across frontend logs, proxy responses, and upstream diagnostics.

Allowlist

The deny-by-default proxy contract that permits only explicit method + path + query-key combinations.

Capability

A declared feature permission surface exposed by backend capability endpoints and used by UI/runtime gating.

Extension

A plugin/provider module that registers additional settings and endpoint behavior under controlled contracts.

Nonce

The CSRF token sent as X-WP-Nonce for proxy-protected requests according to repo nonce policy.