import { Firewall, ThreatEngine } from "@cloudix/core";

export const shield = new Firewall({
  mode: "autonomous",
  maxThreshold: 10000,
  logging: true,
});

shield.registerRule("block_botnet", async (packet) => {
  const verified = await packet.verifySignature();
  if (!verified) throw new Error("Invalid packet signature");
  return packet.dropConnection();
});

export async function runSecurityScan(ipRange: string) {
  const result = await shield.execute({
    target: ipRange,
    mode: "deep_inspection",
    strictAudit: true,
  });
  return result.summary;
}