React UI
-> Tauri commands
-> AppState
-> SqliteStore
-> RuleEngine (Rhai + header rewrite + mock + delay)
-> ProxyServer
-> HTTP forwarding via hyper + hyper-rustls
-> CONNECT tunneling via TCP
-> Optional local-only HTTPS MITM
-> WebSocket capture for ws://
-> gRPC metadata and trailer capture
-> capture events
-> Event broadcast
crates/core: proxy, rules, persistence, export, replay, security, and data model.apps/desktop/src-tauri: Tauri state and commands.apps/desktop/src: React UI and event-driven views.
- Proxy receives a request.
- Request preview is captured and redacted.
- Rules are applied in priority order.
- Request is mocked, rewritten, delayed, or forwarded upstream.
- Response is captured, redacted, and stored.
- UI receives summary events and reloads detail on demand.
- Collections can be created from saved session snapshots.
- SQLite stores session summaries, details, rules, and collections.
- Export files are written under the app data export directory.
- HTTPS MITM generates a local Root CA under the app data directory.
- HTTPS MITM is off by default.
- The local Root CA is generated explicitly by the user.
- The UI shows install hints and current MITM state.
- Sensitive headers are redacted in previews by default.