internal/

Package capture defines what the streaming tee extracts from an upstream response — the frozen handoff between the proxy's forward-then-inspect tee (M1) and the metering emitter (M2).

Package config loads interceptor settings from a YAML file, applying defaults then parsing/validating.

Package drain is the CONSUMER side of the metering durability ladder.

Package emit provides a durable metering.Emitter that ships events via a three-level durability ladder:

Package identity reads the trusted identity headers that atlas-auth (Traefik ForwardAuth) injects upstream.

Package iolog is M5: per-tenant, opt-in, sampled, short-retention capture of request and response BODIES, forked from the same upstream bytes the metering tee already sees but written to a SEPARATE store with its own retention and access controls.

Package logging provides a simple leveled logger, mirroring the convention used across Saturn's Go services (see auth-server's util.Logger).

Package metering defines the immutable billing event and the Emitter contract.

Package proxy is the core of the interceptor: a thin, tenant-aware reverse proxy that sits behind Traefik and in front of the inference router/engine.

Package rating is phoebe's REVENUE path.