internal/

Package amqpwire reads the AMQP 0-9-1 protocol, the one RabbitMQ speaks.

Package api exposes the captured traffic over HTTP.

Package autostart manages Sonda's opt-in, per-user Windows logon task.

Package calldiff compares two decoded payloads by structure rather than by text.

Package config loads and validates the declarative target list that tells Sonda which local services to sit in front of.

Package discover reads a project's own configuration to find the services it talks to.

Package drift compares the shape of a response against what it used to be.

Package fault makes a service misbehave on purpose.

Package graphql reads a GraphQL exchange out of the bytes that carried it.

Package grpcwire understands the two layers of framing under a gRPC call, without needing to know what the messages mean.

Package mcp exposes captured traffic to coding agents.

Package pgwire reads the PostgreSQL v3 frontend/backend protocol.

Package protoschema resolves protobuf schemas so captured gRPC messages can be shown with field names instead of field numbers.

Package proxy sits between a local client and one upstream service, forwards the exchange untouched, and hands a copy to the recorder.

Package runtime turns the stored configuration into running listeners.

Package store persists captured calls in SQLite.

Package stub lets Sonda answer for a service instead of forwarding to it.

Package supervisor owns the listeners.

Package tlsca issues the certificates Sonda presents when it terminates TLS for a client, signed by an authority it generates once and keeps beside the database.

Package trace groups captured calls into the requests they belong to.

Package tui is the terminal client.

Package web serves the operator interface, embedded in the binary.

Package wsframe reads the WebSocket wire format.