rulesengine

type Engine struct {
	// contains filtered or unexported fields
}

type Result struct {
	Allowed bool
	Rule    string // The rule that matched (if any)
}

type Rule struct {

	// The path patterns that can match for this rule.
	// - nil means all paths allowed
	// - Each []string represents a path pattern (list of segments)
	// - a path segment of `*` acts as a wild card.
	PathPattern [][]string

	// The labels of the host, i.e. ["google", "com"].
	// - nil means all hosts allowed
	// - A label of `*` acts as a wild card.
	// - Exact domain patterns (e.g., "github.com") match ONLY the exact domain (no subdomains)
	// - Wildcard patterns starting with "*" (e.g., "*.github.com") match ONLY subdomains (not the base domain)
	HostPattern []string

	// The allowed http methods.
	// - nil means all methods allowed
	MethodPatterns map[string]struct{}

	// Raw rule string for logging
	Raw string
}