[imantsk]

Change

Keep Lexicon terms and categories private on the site. Their post type and taxonomy no longer expose public permalinks or standard WordPress REST routes. The admin category picker uses a permission-checked plugin route. Public page settings omit Lexicon terms and descriptions; server translation requests still receive the scoped terms.

For existing installations, a one-time marker clears supported page caches on the first uncached WordPress request after updating. Fresh installations do not clear page caches. External CDN caches may need a separate purge.

Verification

• A local WordPress fixture returned 404 for a former Lexicon permalink and the standard term and category REST routes. The plugin category route returned 401 signed out and 200 for an authorized admin.
• A synthetic term and description were absent from visitor page settings and present in server translation settings.
• PHP suite, 1,471 JavaScript tests, typecheck, PHP and style lint, and build passed.
• Tests cover authorization, payload privacy, one-time cache purge, fresh activation, downgrade, reactivation, and a failing cache hook.