I got the following structure setup:
rules/ alert/ watchlist.py meta.py __init__.py query/ conversion.py __ini