Module eval 

Rule evaluation engine. Synchronous, bounded, no I/O.

Regex evaluation is checked against a 100 ms budget after matching. Invalid regex patterns are treated as non-matching (never panic).

Structs

RegexCache

Cache of compiled regex patterns keyed by the raw pattern string. Prevents re-compilation on every evaluation pass.

Functions

evaluate_condition

Evaluate a single condition against a message.

evaluate_rule

Evaluate a filter rule against a message.

field_value

Resolve the string value of a condition field on a message.

glob_match

Simple glob matching supporting * (any chars) and ? (single char).

sort_rules_by_priority

Sort rules by priority (ascending = highest priority first).