internal/

Package api holds the request/response types of pano's control API.

Package bus is a fan-out event bus with bounded per-subscriber queues.

Package ca is pano's local certificate authority: it generates a root CA on first run, mints per-host leaf certificates on demand for TLS interception, and (on macOS) installs/uninstalls trust in the login keychain.

Package cli implements the `pano` command tree.

Package client is the Go client for pano's control API over the daemon's Unix socket (or loopback TCP).

Package config defines pano's on-disk layout under ~/.pano and its configuration file (config.toml), with defaults that are safe out of the box.

Package control serves pano's local control API: HTTP/1.1 + JSON over a Unix socket (and optionally loopback TCP).

Package daemon is pano's composition root: it wires the certificate authority, the proxy engine, capture storage, the rules engine, the system-proxy manager and the control/MCP servers together, and implements the control API backend on top of them.

Package explain turns captured LLM API traffic into compact digests.

Package flow defines the capture data model: a Flow is one HTTP exchange, WebSocket session, or opaque tunnel seen by the proxy, plus the events the engine publishes as a flow progresses.

Package glob implements the tiny wildcard language pano uses for host and path matching: '*' matches any run of characters (including '.' and '/'), '?' matches one character, and matching is case-insensitive.

Package har exports captured flows as HAR 1.2 documents and imports HAR documents produced by pano, browsers (Chrome, Firefox) and other proxies.

Package mcpserver exposes pano to AI agents over the Model Context Protocol.

Package mimeclass buckets Content-Type values into the short classes pano shows in list rows and uses in filters and views.

Package mobile is everything `pano mobile` needs to put a phone behind the proxy: finding the Mac's LAN address, a listener that only admits the local network, the root certificate as an Apple configuration profile and as DER for Android, and the setup site the phone opens — one page that names the proxy settings, hands out the certificate and reports, live, how far the device has got.

Package proxy is pano's MITM engine: an HTTP/1.1 proxy listener that intercepts CONNECT tunnels, terminates TLS with certificates minted by the local CA, serves HTTP/1.1 or HTTP/2 on the decrypted connection, forwards to the origin over a pooled transport, and captures every exchange while streaming bodies in both directions.

Package qr renders a QR code as rows of half-block characters — two modules per terminal row — for the terminal front ends (`pano mobile` and the TUI's Mobile drawer).

Package rules implements pano's live traffic rules and breakpoints.

Package simulator finds booted iOS Simulators and installs pano's root CA into their trust stores.

Package store keeps captured flows for the lifetime of the daemon, entirely in memory: a bounded ring of flow snapshots (the hot path), a byte-budgeted content-addressed blob cache for bodies, a per-flow WebSocket message log, the session registry, and the filter matching used by every list/search endpoint.

Package sysproxy toggles the operating system's HTTP/HTTPS proxy so that every application on the machine sends its traffic through pano.

Package testutil provides helpers shared by pano's tests: a temporary CA, TLS origins, and clients that route through a proxy and trust only the test CA.

Package tui implements `pano ui`, an interactive terminal interface over the control API: a live flow list, a detail pane with the same body views the CLI and MCP server expose, LLM explain, diff, replay, rules and held requests.

Package update tells the user when a newer pano release exists.

Package view renders captured HTTP bodies and headers into the compact, token-efficient text that pano shows to LLM agents and humans.

Package watchdog restores the system proxy settings if the pano daemon dies without cleaning up after itself.