Struct EndpointEngine 

pub struct EndpointEngine {
    pub allowlist: Arc<DeveloperAllowlist>,
    pub threat_intel: Arc<ThreatIntelDB>,
    pub quarantine: Arc<QuarantineVault>,
    pub dns_filter: Option<Arc<DnsFilter>>,
    /* private fields */
}

Orchestrates all endpoint protection subsystems.

Fields

allowlist: Arc<DeveloperAllowlist>

Developer-aware allowlist.

threat_intel: Arc<ThreatIntelDB>

Threat intelligence database.

quarantine: Arc<QuarantineVault>

File quarantine vault.

dns_filter: Option<Arc<DnsFilter>>

DNS filtering proxy.

Implementations

impl EndpointEngine

pub fn new(config: EndpointConfig) -> Self

Create a new endpoint engine with the given configuration.

pub async fn start(&self, audit: Arc<AuditChain>) -> Vec<JoinHandle<()>>

Start all background monitors. Returns JoinHandles for spawned tasks.

pub async fn scan_file(&self, path: &Path) -> Vec<ScanResult>

Scan a single file with all engines.

pub async fn scan_dir(&self, dir: &Path) -> Vec<ScanResult>

Scan a directory recursively.

pub fn subscribe(&self) -> Receiver<ScanResult>

Subscribe to real-time scan results.

pub fn recent_detections(&self, count: usize) -> Vec<ScanResult>

Get recent detection history.

pub fn stats(&self) -> EndpointStats

Get runtime statistics.

pub fn is_running(&self) -> bool

Check if the engine is running.