/**
 * Minimal, dependency-free User-Agent parsing.
 *
 * This is intentionally heuristic and only aims to produce a human-readable label
 * (e.g. "Chrome on macOS") for displaying active sessions/devices. It is not a full
 * UA parser and should not be relied upon for feature detection.
 */ /**
 * Upper bound on the User-Agent length we are willing to scan. Real-world UA
 * strings are comfortably under this, and browser/OS tokens always appear early,
 * so clamping protects against pathologically large attacker-controlled headers
 * without losing accuracy for legitimate clients.
 */ const MAX_UA_LENGTH = 1024;
const detectBrowser = (ua)=>{
    // Order matters: more specific tokens must be checked first.
    if (/\bEdg(?:e|A|iOS)?\//.test(ua)) return 'Edge';
    if (/\b(?:OPR|Opera)\//.test(ua)) return 'Opera';
    if (/\b(?:SamsungBrowser)\//.test(ua)) return 'Samsung Internet';
    // Chromium forks below ship a "Chrome/" token too, so they must be matched
    // before the generic Chrome check or they'd all collapse into "Chrome".
    if (/\bVivaldi\//.test(ua)) return 'Vivaldi';
    if (/\b(?:YaBrowser|Yowser)\//.test(ua)) return 'Yandex Browser';
    if (/\bBrave\//.test(ua)) return 'Brave';
    if (/\b(?:Firefox|FxiOS)\//.test(ua)) return 'Firefox';
    if (/\b(?:Chrome|CriOS|Chromium)\//.test(ua)) return 'Chrome';
    // Safari ships "Safari/xxx" but so do Chrome/Edge; only treat as Safari when no Chrome token.
    if (/\bVersion\/[\d.]+ (?:Mobile\/\S+ )?Safari\//.test(ua) || /\bSafari\//.test(ua)) {
        return 'Safari';
    }
    return undefined;
};
const detectOS = (ua)=>{
    if (/\bWindows NT\b/.test(ua)) return 'Windows';
    if (/\b(?:iPhone|iPad|iPod)\b/.test(ua)) return 'iOS';
    if (/\bAndroid\b/.test(ua)) return 'Android';
    // "Mac OS X" appears on iOS too, so this must come after the iOS check.
    if (/\b(?:Macintosh|Mac OS X)\b/.test(ua)) return 'macOS';
    if (/\bCrOS\b/.test(ua)) return 'ChromeOS';
    if (/\bLinux\b/.test(ua)) return 'Linux';
    return undefined;
};
/**
 * Parses a User-Agent string into a best-effort browser/OS and a display label.
 * Returns an empty object when the input is missing or unrecognized.
 */ const parseUserAgent = (userAgent)=>{
    if (!userAgent || typeof userAgent !== 'string') {
        return {};
    }
    // Clamp before scanning so an oversized header cannot drive the regex work.
    const ua = userAgent.length > MAX_UA_LENGTH ? userAgent.slice(0, MAX_UA_LENGTH) : userAgent;
    const browser = detectBrowser(ua);
    const os = detectOS(ua);
    let deviceName;
    if (browser && os) {
        deviceName = `${browser} on ${os}`;
    } else if (browser) {
        deviceName = browser;
    } else if (os) {
        deviceName = os;
    }
    return {
        browser,
        os,
        deviceName
    };
};
/**
 * Convenience helper returning only the human-readable device label, or undefined.
 */ const getDeviceName = (userAgent)=>parseUserAgent(userAgent).deviceName;

export { getDeviceName, parseUserAgent };
//# sourceMappingURL=user-agent.mjs.map