Enum Observation 

pub enum Observation {
    ApiCall {
        api: String,
        args: Vec<Value>,
        result: Value,
    },
    PropertyRead {
        object: String,
        property: String,
        value: Value,
    },
    PropertyWrite {
        object: String,
        property: String,
        value: Value,
    },
    DomMutation {
        kind: DomMutationKind,
        target: String,
        detail: String,
    },
    NetworkRequest {
        url: String,
        method: String,
        headers: Vec<(String, String)>,
        body: Option<String>,
    },
    TimerSet {
        id: u32,
        delay_ms: u32,
        is_interval: bool,
        callback_preview: String,
    },
    DynamicCodeExec {
        source: DynamicCodeSource,
        code_preview: String,
    },
    CookieAccess {
        operation: CookieOp,
        name: String,
        value: Option<String>,
    },
    CssExfiltration {
        selector: String,
        url: String,
        trigger: String,
    },
    WasmInstantiation {
        module_size: usize,
        import_names: Vec<String>,
        export_names: Vec<String>,
    },
    FingerprintAccess {
        api: String,
        detail: String,
    },
    ContextMessage {
        from_context: String,
        to_context: String,
        payload: Value,
    },
    Error {
        message: String,
        script_index: Option<usize>,
    },
    ResourceLimit {
        kind: ResourceLimitKind,
        detail: String,
    },
}

A single observable action performed by JavaScript during execution.

Observations are the OUTPUT of detonation. They describe what the code DID, not what it IS. Every observation includes enough context to reconstruct the action without access to the original script.

Consumers (Sear, Soleno) receive a Vec<Observation> in execution order. The observation stream is the single source of truth for behavioral analysis.

Variants

ApiCall

A bridged API function was called.

Fields

api: String

args: Vec<Value>

result: Value

PropertyRead

A bridged object property was read.

Fields

object: String

property: String

value: Value

PropertyWrite

A bridged object property was written.

Fields

object: String

property: String

value: Value

DomMutation

DOM was mutated (element created, attribute set, innerHTML written, etc.).

Fields

kind: DomMutationKind

target: String

detail: String

NetworkRequest

An outbound network request was attempted.

Fields

url: String

method: String

headers: Vec<(String, String)>

body: Option<String>

TimerSet

A timer was registered.

Fields

id: u32

delay_ms: u32

is_interval: bool

callback_preview: String

DynamicCodeExec

Dynamic code execution: eval(), Function(), setTimeout(string), etc.

Fields

source: DynamicCodeSource

code_preview: String

CookieAccess

Cookie was read or written.

Fields

operation: CookieOp

name: String

value: Option<String>

CssExfiltration

A CSS rule matched that would trigger an external URL load.

Fields

selector: String

url: String

trigger: String

WasmInstantiation

JavaScript attempted to instantiate a WebAssembly module.

Fields

module_size: usize

import_names: Vec<String>

export_names: Vec<String>

FingerprintAccess

A fingerprinting API was accessed.

Fields

api: String

detail: String

ContextMessage

Message sent between execution contexts.

Fields

from_context: String

to_context: String

payload: Value

Error

Script execution produced an error.

Fields

message: String

script_index: Option<usize>

ResourceLimit

Execution hit a resource limit.

Fields

kind: ResourceLimitKind

detail: String

Trait Implementations

impl Clone for Observation

fn clone(&self) -> Observation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Observation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Observation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Observation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.