Lots of updates

app/services/waf_policy_matcher.rb

@@ -73,6 +73,12 @@ class WafPolicyMatcher
   def match_and_generate_rules
     find_matching_policies
     generate_rules
+
+    # Return hash format expected by ProcessWafPoliciesJob
+    {
+      matching_policies: @matching_policies,
+      generated_rules: @generated_rules
+    }
   end
 
   # Class methods for batch processing
@@ -81,6 +87,20 @@ class WafPolicyMatcher
     matcher.match_and_generate_rules
   end
 
+  # Evaluate a network range against policies and mark it as evaluated
+  # This is the main entry point for inline policy evaluation
+  def self.evaluate_and_mark!(network_range)
+    return { matching_policies: [], generated_rules: [] } unless network_range
+
+    matcher = new(network_range: network_range)
+    result = matcher.match_and_generate_rules
+
+    # Mark this network range as evaluated
+    network_range.update_column(:policies_evaluated_at, Time.current)
+
+    result
+  end
+
   def self.batch_process_network_ranges(network_ranges)
     results = []