| Hub | WordPress site where ChecklistDek is installed; orchestrates all clients. |
| Client site | Remote WordPress site you manage from the hub. |
| Checklist | Reusable definition: title, description, ordered steps. |
| Step | One unit of work—manual (human) or api (REST automation). |
| Run | One checklist execution on one site at a point in time. |
| Snapshot | JSON copy of run + steps pushed to the client panel. |
| Client panel | Must-use plugin UI on client wp-admin for active runs. |
| Application Password | WordPress per-user REST credential; used hub → client. |
| Deep link | wp-admin path (e.g. options-permalink.php) opened from a step. |
| Push / Refresh Client Panel | Hub sends snapshot (and optionally reinstalls bundle) to client. |
| Drift | Configuration differs from expected baseline after verification. |
| Activity log / Audit log | Immutable record of hub actions and many client callbacks. |
| Batch Run | Hub screen for single-run wizard, multi-site queue, and drift. |
| Template | Built-in checklist JSON shipped with the plugin. |
| Vault | Pro-only private template storage. |
| Auto-Capture | Pro-only session recording client admin actions into draft steps. |
| Exclude options | Settings fields protected from API checklist mutations. |
| Credential vault | Hub encryption for stored Application Passwords. |
| Integration source | Marker that a site row came from MainWP, WP Umbrella, etc. |
| Telemetry rules | Field-mapping preferences for connector sync—not analytics telemetry. |
| Capability | Custom permission (checklistdek_*) gating menus and REST. |
| Archive (run) | Soft-hide from history without deleting step data immediately. |
| Client run token | Secret per run for client→hub callbacks; not shown in admin UI. |
