Module constraint 

where constraints: predicates on captured metavars (Semgrep metavariable-regex / metavariable-comparison / metavariable-pattern).

A match survives only when every constraint holds. Constraints are compiled once (regex compiled, sub-pattern lowered to a tree-sitter query) and evaluated against each match’s metavar bindings.

Structs

CompiledConstraint

A compiled where constraint bound to one metavar.