Google Safe Browsing API

/**
 * GoogleSafeBrowsingAPI - generated by OmniStream from Google Safe Browsing API's OpenAPI spec.
 * One typed method per endpoint. A single Omni key reaches the API.
 */
const DEFAULT_BASE = "https://grid.skinvaults.online/v1/proxy/google-safebrowsing";

export class GoogleSafeBrowsingAPIError extends Error {
  status: number;
  code?: string;
  constructor(status: number, code: string | undefined, message?: string) {
    super(message || `GoogleSafeBrowsingAPI error ${status}`);
    this.name = "GoogleSafeBrowsingAPIError";
    this.status = status;
    this.code = code;
  }
}

export interface GoogleSafeBrowsingAPIOptions {
  baseUrl?: string;
  fetch?: typeof fetch;
  timeoutMs?: number;
}

export class GoogleSafeBrowsingAPI {
  /** @param token Your OmniStream key (one key for every API). */
  constructor(private token: string, private opts: GoogleSafeBrowsingAPIOptions = {}) {
    if (!token) throw new Error("GoogleSafeBrowsingAPI: token is required");
  }
  rateLimit: { remainingMinute?: number; remainingDay?: number } | null = null;

  private async _request(method: string, path: string, { params, body }: { params?: Record<string, unknown>; body?: unknown } = {}): Promise<any> {
    const f = this.opts.fetch ?? globalThis.fetch;
    const url = new URL((this.opts.baseUrl ?? DEFAULT_BASE).replace(/\/+$/, "") + path);
    if (params) for (const [k, v] of Object.entries(params)) if (v != null) url.searchParams.set(k, String(v));
    const headers: Record<string, string> = { "x-omni-key": this.token };
    if (body !== undefined) headers["content-type"] = "application/json";
    const res = await f(url, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined });
    this.rateLimit = {
      remainingMinute: Number(res.headers.get("x-ratelimit-remaining-minute")) || undefined,
      remainingDay: Number(res.headers.get("x-ratelimit-remaining-day")) || undefined,
    };
    const data = await res.json().catch(() => ({}));
    if (!res.ok) throw new GoogleSafeBrowsingAPIError(res.status, data?.error?.code, data?.error?.message);
    return data.data ?? data;
  }

  safebrowsingEncodedFullHashesGet(params: { "encodedRequest": string; "$.xgafv"?: string; "access_token"?: string; "alt"?: string; "callback"?: string; "fields"?: string; "key"?: string; "oauth_token"?: string; "prettyPrint"?: boolean; "quotaUser"?: string; "upload_protocol"?: string; "uploadType"?: string; "clientId"?: string; "clientVersion"?: string }): Promise<any> {
    return this._request("GET", "/v4/encodedFullHashes/{encodedRequest}", { params });
  }

  safebrowsingEncodedUpdatesGet(params: { "encodedRequest": string; "$.xgafv"?: string; "access_token"?: string; "alt"?: string; "callback"?: string; "fields"?: string; "key"?: string; "oauth_token"?: string; "prettyPrint"?: boolean; "quotaUser"?: string; "upload_protocol"?: string; "uploadType"?: string; "clientId"?: string; "clientVersion"?: string }): Promise<any> {
    return this._request("GET", "/v4/encodedUpdates/{encodedRequest}", { params });
  }

  /** Finds the full hashes that match the requested hash prefixes. */
  safebrowsingFullHashesFind(body: unknown, params: { "$.xgafv"?: string; "access_token"?: string; "alt"?: string; "callback"?: string; "fields"?: string; "key"?: string; "oauth_token"?: string; "prettyPrint"?: boolean; "quotaUser"?: string; "upload_protocol"?: string; "uploadType"?: string }): Promise<any> {
    return this._request("POST", "/v4/fullHashes:find", { body, params });
  }

  /** Reports a Safe Browsing threat list hit to Google. Only projects with TRUSTED_REPORTER visibility can use this method. */
  safebrowsingThreatHitsCreate(body: unknown, params: { "$.xgafv"?: string; "access_token"?: string; "alt"?: string; "callback"?: string; "fields"?: string; "key"?: string; "oauth_token"?: string; "prettyPrint"?: boolean; "quotaUser"?: string; "upload_protocol"?: string; "uploadType"?: string }): Promise<any> {
    return this._request("POST", "/v4/threatHits", { body, params });
  }

  /** Fetches the most recent threat list updates. A client can request updates for multiple lists at once. */
  safebrowsingThreatListUpdatesFetch(body: unknown, params: { "$.xgafv"?: string; "access_token"?: string; "alt"?: string; "callback"?: string; "fields"?: string; "key"?: string; "oauth_token"?: string; "prettyPrint"?: boolean; "quotaUser"?: string; "upload_protocol"?: string; "uploadType"?: string }): Promise<any> {
    return this._request("POST", "/v4/threatListUpdates:fetch", { body, params });
  }

  /** Lists the Safe Browsing threat lists available for download. */
  safebrowsingThreatListsList(params: { "$.xgafv"?: string; "access_token"?: string; "alt"?: string; "callback"?: string; "fields"?: string; "key"?: string; "oauth_token"?: string; "prettyPrint"?: boolean; "quotaUser"?: string; "upload_protocol"?: string; "uploadType"?: string }): Promise<any> {
    return this._request("GET", "/v4/threatLists", { params });
  }

  /** Finds the threat entries that match the Safe Browsing lists. */
  safebrowsingThreatMatchesFind(body: unknown, params: { "$.xgafv"?: string; "access_token"?: string; "alt"?: string; "callback"?: string; "fields"?: string; "key"?: string; "oauth_token"?: string; "prettyPrint"?: boolean; "quotaUser"?: string; "upload_protocol"?: string; "uploadType"?: string }): Promise<any> {
    return this._request("POST", "/v4/threatMatches:find", { body, params });
  }
}

export default GoogleSafeBrowsingAPI;