@shad0wz7/nestjs-pdf 3.0.1 → 3.2.0

package/dist/index.mjs

@@ -1,11 +1,13 @@
-import { createRequire } from "node:module";
-import { basename, extname, join, relative, resolve, sep } from "node:path";
-import { Global, Inject, Injectable, Logger, Module, Optional } from "@nestjs/common";
-import { PDFArray, PDFDict, PDFDocument, PDFName, PDFNumber, PDFString } from "pdf-lib";
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { Inject, Injectable, Logger, Module, Optional } from "@nestjs/common";
+import { PDFArray, PDFDict, PDFDocument, PDFName, PDFNumber, PDFString, StandardFonts, degrees, rgb } from "pdf-lib";
 import { deepmerge } from "deepmerge-ts";
+import { lookup } from "node:dns/promises";
 import { existsSync, promises, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
-import { Browser, BrowserPlatform, canDownload, detectBrowserPlatform, getInstalledBrowsers, install, resolveBuildId } from "@puppeteer/browsers";
-import { launch } from "puppeteer";
+import { BlockList, isIP } from "node:net";
+import { fileURLToPath } from "node:url";
+import { TargetType, launch } from "puppeteer";
+import { Browser as Browser$1, BrowserPlatform, canDownload, detectBrowserPlatform, getInstalledBrowsers, install, resolveBuildId } from "@puppeteer/browsers";
 import ejs from "ejs";
 import { Eta } from "eta";
 import Handlebars from "handlebars";
@@ -13,35 +15,78 @@ import mjml from "mjml";
 import mustache from "mustache";
 import nunjucks from "nunjucks";
 import pug from "pug";
-import { isObject, isUndefined } from "@nestjs/common/utils/shared.utils.js";
-import * as fs$1 from "fs";
-import fs from "fs";
-import { resolve as resolve$1 } from "path";
-import { Subject } from "rxjs";
-import { randomUUID } from "crypto";
-//#region \0rolldown/runtime.js
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
+//#region src/exceptions/nestjs-pdf.exception.ts
+let NestjsPdfErrorCode = /* @__PURE__ */ function(NestjsPdfErrorCode) {
+	NestjsPdfErrorCode["ENGINE_NOT_AVAILABLE"] = "ENGINE_NOT_AVAILABLE";
+	NestjsPdfErrorCode["TEMPLATE_CONFIGURATION_ERROR"] = "TEMPLATE_CONFIGURATION_ERROR";
+	NestjsPdfErrorCode["TEMPLATE_RENDER_ERROR"] = "TEMPLATE_RENDER_ERROR";
+	NestjsPdfErrorCode["BROWSER_INSTALLATION_ERROR"] = "BROWSER_INSTALLATION_ERROR";
+	NestjsPdfErrorCode["BROWSER_UNAVAILABLE"] = "BROWSER_UNAVAILABLE";
+	NestjsPdfErrorCode["PDF_GENERATION_ERROR"] = "PDF_GENERATION_ERROR";
+	NestjsPdfErrorCode["SIGNATURE_DEPENDENCY_ERROR"] = "SIGNATURE_DEPENDENCY_ERROR";
+	NestjsPdfErrorCode["SIGNATURE_PLACEMENT_ERROR"] = "SIGNATURE_PLACEMENT_ERROR";
+	NestjsPdfErrorCode["WATERMARK_ERROR"] = "WATERMARK_ERROR";
+	return NestjsPdfErrorCode;
+}({});
+var NestjsPdfException = class extends Error {
+	constructor(message, options) {
+		super(message, options);
+		this.name = this.constructor.name;
 	}
-	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
+//#endregion
+//#region src/exceptions/browser-installation.exception.ts
+var BrowserInstallationException = class extends NestjsPdfException {
+	code = "BROWSER_INSTALLATION_ERROR";
+};
+//#endregion
+//#region src/exceptions/browser-unavailable.exception.ts
+var BrowserUnavailableException = class extends NestjsPdfException {
+	code = "BROWSER_UNAVAILABLE";
+};
+//#endregion
+//#region src/exceptions/engine-not-available.exception.ts
+var EngineNotAvailableException = class extends NestjsPdfException {
+	code = "ENGINE_NOT_AVAILABLE";
+	constructor(engineName) {
+		super(`${engineName} service is not available. If the problem persists, open an issue in the repo.`);
+	}
+};
+//#endregion
+//#region src/exceptions/pdf-generation.exception.ts
+var PdfGenerationException = class extends NestjsPdfException {
+	code = "PDF_GENERATION_ERROR";
+};
+//#endregion
+//#region src/exceptions/signature-dependency.exception.ts
+var SignatureDependencyException = class extends NestjsPdfException {
+	code = "SIGNATURE_DEPENDENCY_ERROR";
+};
+//#endregion
+//#region src/exceptions/signature-placement.exception.ts
+var SignaturePlacementException = class extends NestjsPdfException {
+	code = "SIGNATURE_PLACEMENT_ERROR";
+};
+//#endregion
+//#region src/exceptions/template-configuration.exception.ts
+var TemplateConfigurationException = class extends NestjsPdfException {
+	code = "TEMPLATE_CONFIGURATION_ERROR";
+};
+//#endregion
+//#region src/exceptions/template-render.exception.ts
+var TemplateRenderException = class extends NestjsPdfException {
+	engine;
+	code = "TEMPLATE_RENDER_ERROR";
+	constructor(engine, message, options) {
+		super(message, options);
+		this.engine = engine;
+	}
+};
+//#endregion
+//#region src/exceptions/watermark.exception.ts
+var WatermarkException = class extends NestjsPdfException {
+	code = "WATERMARK_ERROR";
+};
 //#endregion
 //#region src/helpers/getRelativePath.helper.ts
 /**
@@ -65,14 +110,12 @@ async function loadPdfjs() {
 		pdfjsPromise = await import("pdfjs-dist/legacy/build/pdf.mjs");
 	} catch (error) {
 		pdfjsPromise = void 0;
-		/* v8 ignore next -- import() rejections are always Error instances in practice */
-		const reason = error instanceof Error ? error.message : String(error);
-		throw new Error([
+		throw new SignatureDependencyException([
 			"Failed to load pdfjs-dist.",
 			"If you use anchor-based signature placement in Node.js, make sure @napi-rs/canvas is installed.",
 			"Try: npm install @napi-rs/canvas",
 			"",
-			`Original error: ${reason}`
+			`Original error: ${error instanceof Error ? error.message : String(error)}`
 		].join("\n"), { cause: error });
 	}
 	return pdfjsPromise;
@@ -170,7 +213,7 @@ async function addSignatureFieldUsingAnchor(pdf, fieldName = "SignatureDebtor",
 	if (anchor) {
 		const pageIndex = anchor.pageIndex;
 		const page = pdfDoc.getPages()[pageIndex];
-		if (!page) throw new Error(`Page ${pageIndex} not found`);
+		if (!page) throw new SignaturePlacementException(`Page ${pageIndex} not found`);
 		const { width: pw, height: ph } = page.getSize();
 		const padX = 40;
 		const padY = 7;
@@ -191,7 +234,7 @@ async function addSignatureFieldUsingAnchor(pdf, fieldName = "SignatureDebtor",
 		const pageIndex = pages.length - 1;
 		const page = pages.at(-1);
 		/* v8 ignore next -- pdf-lib always produces at least one page on save/load; only a hand-crafted, malformed PDF could hit this */
-		if (!page) throw new Error(`Page ${pageIndex} not found`);
+		if (!page) throw new SignaturePlacementException(`Page ${pageIndex} not found`);
 		const { width: pageWidth } = page.getSize();
 		addSignatureFieldAt(pdfDoc, pageIndex, {
 			fieldName,
@@ -204,6 +247,150 @@ async function addSignatureFieldUsingAnchor(pdf, fieldName = "SignatureDebtor",
 	return await pdfDoc.save();
 }
 //#endregion
+//#region src/helpers/watermark.helper.ts
+const DEFAULT_OPACITY = .15;
+const DEFAULT_ROTATION = 45;
+const DEFAULT_FONT_SIZE = 60;
+const DEFAULT_FONT = "HelveticaBold";
+const DEFAULT_COLOR = "#808080";
+const DEFAULT_TILE_SPACING = 100;
+function parseHexColor(color) {
+	const match = /^#([\da-f]{3}|[\da-f]{6})$/i.exec(color);
+	if (!match) throw new WatermarkException(`Invalid watermark color "${color}", expected #rgb or #rrggbb`);
+	const hex = match[1].length === 3 ? [...match[1]].map((c) => c + c).join("") : match[1];
+	const channel = (i) => Number.parseInt(hex.slice(i, i + 2), 16) / 255;
+	return rgb(channel(0), channel(2), channel(4));
+}
+function embedImage(pdfDoc, bytes) {
+	const isPng = bytes[0] === 137 && bytes[1] === 80 && bytes[2] === 78;
+	const isJpeg = bytes[0] === 255 && bytes[1] === 216;
+	if (isPng) return pdfDoc.embedPng(bytes);
+	if (isJpeg) return pdfDoc.embedJpg(bytes);
+	throw new WatermarkException("Watermark image must be a PNG or JPEG");
+}
+function validate(options) {
+	const { text, image, opacity, fontSize, imageWidth, tileSpacing } = options;
+	if (!text && !image) throw new WatermarkException("A watermark requires at least a `text` or an `image`");
+	if (opacity !== void 0 && !(opacity >= 0 && opacity <= 1)) throw new WatermarkException("Watermark `opacity` must be between 0 and 1");
+	if (fontSize !== void 0 && !(fontSize > 0)) throw new WatermarkException("Watermark `fontSize` must be greater than 0");
+	if (imageWidth !== void 0 && !(imageWidth > 0)) throw new WatermarkException("Watermark `imageWidth` must be greater than 0");
+	if (tileSpacing !== void 0 && !(tileSpacing >= 0)) throw new WatermarkException("Watermark `tileSpacing` must be at least 0");
+}
+function resolvePageIndexes(pages, total) {
+	if (!pages) return Array.from({ length: total }, (_, i) => i);
+	for (const page of pages) if (!Number.isInteger(page) || page < 1 || page > total) throw new WatermarkException(`Watermark page ${page} is out of range (the PDF has ${total} page(s))`);
+	return [...new Set(pages)].map((page) => page - 1);
+}
+/**
+* Centers of the marks for one page, in page coordinates. Tiles follow the
+* rotated axes so rotated marks never overlap each other.
+*/
+function markCenters(pageWidth, pageHeight, mark, options) {
+	const cx = pageWidth / 2;
+	const cy = pageHeight / 2;
+	if (options.position === "center") return [{
+		x: cx,
+		y: cy
+	}];
+	const theta = options.rotation * Math.PI / 180;
+	const cos = Math.cos(theta);
+	const sin = Math.sin(theta);
+	const stepX = mark.width + options.spacing;
+	const stepY = mark.height + options.spacing;
+	const reach = Math.hypot(mark.width, mark.height) / 2;
+	const n = Math.ceil((Math.hypot(pageWidth, pageHeight) / 2 + reach) / Math.min(stepX, stepY));
+	const centers = [];
+	for (let i = -n; i <= n; i++) for (let j = -n; j <= n; j++) {
+		const x = cx + i * stepX * cos - j * stepY * sin;
+		const y = cy + i * stepX * sin + j * stepY * cos;
+		if (x >= -reach && x <= pageWidth + reach && y >= -reach && y <= pageHeight + reach) centers.push({
+			x,
+			y
+		});
+	}
+	return centers;
+}
+async function buildMark(pdfDoc, options, pageWidth) {
+	const opacity = options.opacity ?? DEFAULT_OPACITY;
+	const rotate = degrees(options.rotation ?? DEFAULT_ROTATION);
+	if (options.image) {
+		const image = await embedImage(pdfDoc, new Uint8Array(options.image));
+		const width = options.imageWidth ?? pageWidth / 2;
+		const height = image.height / image.width * width;
+		return {
+			width,
+			height,
+			draw: (page, x, y) => page.drawImage(image, {
+				x,
+				y,
+				width,
+				height,
+				opacity,
+				rotate
+			})
+		};
+	}
+	const font = await pdfDoc.embedFont(StandardFonts[options.font ?? DEFAULT_FONT]);
+	const size = options.fontSize ?? DEFAULT_FONT_SIZE;
+	const text = options.text;
+	const color = parseHexColor(options.color ?? DEFAULT_COLOR);
+	let width;
+	try {
+		width = font.widthOfTextAtSize(text, size);
+	} catch (error) {
+		throw new WatermarkException(`Watermark text cannot be rendered with the ${options.font ?? DEFAULT_FONT} font (only WinAnsi characters are supported)`, { cause: error });
+	}
+	return {
+		width,
+		height: font.heightAtSize(size, { descender: false }),
+		draw: (page, x, y) => page.drawText(text, {
+			x,
+			y,
+			size,
+			font,
+			color,
+			opacity,
+			rotate
+		})
+	};
+}
+/**
+* Stamps a text or image watermark on the pages of an existing PDF.
+*/
+async function addWatermark(pdf, options) {
+	validate(options);
+	try {
+		const pdfDoc = await PDFDocument.load(new Uint8Array(pdf));
+		const pages = pdfDoc.getPages();
+		const indexes = resolvePageIndexes(options.pages, pages.length);
+		const position = options.position ?? "center";
+		const rotation = options.rotation ?? DEFAULT_ROTATION;
+		const spacing = options.tileSpacing ?? DEFAULT_TILE_SPACING;
+		const theta = rotation * Math.PI / 180;
+		const cos = Math.cos(theta);
+		const sin = Math.sin(theta);
+		const marks = /* @__PURE__ */ new Map();
+		for (const index of indexes) {
+			const page = pages[index];
+			const { width: pageWidth, height: pageHeight } = page.getSize();
+			let mark = marks.get(pageWidth);
+			if (!mark) {
+				mark = await buildMark(pdfDoc, options, pageWidth);
+				marks.set(pageWidth, mark);
+			}
+			for (const center of markCenters(pageWidth, pageHeight, mark, {
+				position,
+				rotation,
+				spacing
+			})) mark.draw(page, center.x - (mark.width / 2 * cos - mark.height / 2 * sin), center.y - (mark.width / 2 * sin + mark.height / 2 * cos));
+		}
+		return await pdfDoc.save();
+	} catch (error) {
+		if (error instanceof WatermarkException) throw error;
+		throw new WatermarkException(`Failed to add watermark: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+	}
+}
+//#endregion
 //#region node_modules/.pnpm/yocto-queue@1.2.2/node_modules/yocto-queue/index.js
 var Node = class {
 	value;
@@ -337,6 +524,154 @@ function mergePuppeteerParameters(defaults, overrides) {
 	return deepmerge(defaults, overrides);
 }
 //#endregion
+//#region src/helpers/request-guard.helper.ts
+const blockedRanges = new BlockList();
+for (const [address, prefix] of [
+	["0.0.0.0", 8],
+	["10.0.0.0", 8],
+	["100.64.0.0", 10],
+	["127.0.0.0", 8],
+	["169.254.0.0", 16],
+	["172.16.0.0", 12],
+	["192.0.0.0", 24],
+	["192.168.0.0", 16],
+	["198.18.0.0", 15],
+	["224.0.0.0", 4],
+	["240.0.0.0", 4]
+]) blockedRanges.addSubnet(address, prefix, "ipv4");
+for (const [address, prefix] of [
+	["::", 128],
+	["::1", 128],
+	["64:ff9b::", 96],
+	["fc00::", 7],
+	["fe80::", 10],
+	["ff00::", 8]
+]) blockedRanges.addSubnet(address, prefix, "ipv6");
+const IPV4_MAPPED_IPV6 = /^::ffff:([\da-f]{1,4}):([\da-f]{1,4})$/i;
+/** True for addresses that must not be reachable from a rendered document. */
+function isPrivateAddress(address) {
+	const family = isIP(address);
+	if (family === 4) return blockedRanges.check(address, "ipv4");
+	if (family === 6) {
+		const mapped = IPV4_MAPPED_IPV6.exec(address);
+		if (mapped) {
+			const high = Number.parseInt(mapped[1], 16);
+			const low = Number.parseInt(mapped[2], 16);
+			return isPrivateAddress([
+				high >> 8,
+				high & 255,
+				low >> 8,
+				low & 255
+			].join("."));
+		}
+		return blockedRanges.check(address, "ipv6");
+	}
+	return true;
+}
+function hostMatches(hostname, pattern) {
+	const host = hostname.toLowerCase();
+	const rule = pattern.toLowerCase();
+	if (rule.startsWith("*.")) return host.endsWith(rule.slice(1));
+	return host === rule;
+}
+function isLocalhostName(hostname) {
+	return hostname === "localhost" || hostname.endsWith(".localhost");
+}
+async function resolvesToPrivateAddress(hostname) {
+	const host = hostname.replace(/^\[|\]$/g, "");
+	if (isIP(host)) return isPrivateAddress(host);
+	if (isLocalhostName(host)) return true;
+	try {
+		return (await lookup(host, {
+			all: true,
+			verbatim: true
+		})).some(({ address }) => isPrivateAddress(address));
+	} catch {
+		return true;
+	}
+}
+async function isFileAllowed(url, roots) {
+	if (roots.length === 0 || url.hostname !== "" && url.hostname !== "localhost") return false;
+	let path;
+	try {
+		path = fileURLToPath(url);
+	} catch {
+		return false;
+	}
+	const real = async (candidate) => {
+		const missing = [];
+		let current = resolve(candidate);
+		for (;;) try {
+			return join(await promises.realpath(current), ...missing);
+		} catch {
+			const parent = dirname(current);
+			if (parent === current) return resolve(candidate);
+			missing.unshift(basename(current));
+			current = parent;
+		}
+	};
+	const target = await real(path);
+	for (const root of roots) {
+		const rel = relative(await real(root), target);
+		if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return true;
+	}
+	return false;
+}
+/** Decides whether the browser may fetch `rawUrl`. */
+async function isRequestAllowed(rawUrl, options) {
+	let url;
+	try {
+		url = new URL(rawUrl);
+	} catch {
+		return false;
+	}
+	switch (url.protocol) {
+		case "about:":
+		case "data:":
+		case "blob:": return true;
+		case "file:": return isFileAllowed(url, options.allowedFileRoots ?? []);
+		case "http:":
+		case "https:":
+			if (options.allowedHosts) return options.allowedHosts.some((pattern) => hostMatches(url.hostname, pattern));
+			if (options.blockPrivateNetworks === false) return true;
+			return !await resolvesToPrivateAddress(url.hostname);
+		default: return false;
+	}
+}
+/** Logs the origin and path only: query strings may carry secrets. */
+function describe(rawUrl) {
+	try {
+		const url = new URL(rawUrl);
+		return `${url.origin === "null" ? `${url.protocol}//` : url.origin}${url.pathname}`;
+	} catch {
+		return "<invalid url>";
+	}
+}
+/**
+* Filters every request the page (and its frames) makes, redirects included,
+* and closes the pop-ups a script could open to escape the filter.
+*/
+async function installRequestGuard(context, page, options) {
+	context.on("targetcreated", (target) => {
+		if (target.type() === TargetType.PAGE && target.opener()) target.page().then((popup) => popup?.close()).catch(() => void 0);
+	});
+	if (options.javascriptEnabled === false) await page.setJavaScriptEnabled(false);
+	await page.setRequestInterception(true);
+	page.on("request", (request) => {
+		(async () => {
+			if (request.isInterceptResolutionHandled()) return;
+			const url = request.url();
+			const allowed = await isRequestAllowed(url, options).catch(() => false);
+			if (request.isInterceptResolutionHandled()) return;
+			if (allowed) await request.continue();
+			else {
+				Logger.warn(`Blocked request to ${describe(url)}`, "NestJsPdf");
+				await request.abort("blockedbyclient");
+			}
+		})().catch(() => void 0);
+	});
+}
+//#endregion
 //#region src/helpers/tokens.ts
 const PDF_PARAMETERS = "PDF_PARAMETERS";
 //#endregion
@@ -353,7 +688,7 @@ function __decorateParam(paramIndex, decorator) {
 }
 //#endregion
 //#region \0@oxc-project+runtime@0.149.0/helpers/esm/decorate.js
-function __decorate$3(decorators, target, key, desc) {
+function __decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
 	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
@@ -382,47 +717,47 @@ function isTargetClosedError(error) {
 	return error.name === "TargetCloseError" || error.message.includes("Target closed") || error.message.includes("Target.createTarget");
 }
 let BrowserService = class BrowserService {
-	cacheDir;
-	options;
-	_browserInstance = null;
-	browser;
+	#cacheDir;
+	#options;
+	#browserInstance = null;
+	#browser;
 	activeJobs = 0;
 	totalJobs = 0;
-	recycleRequested = false;
-	recycling = false;
-	shuttingDown = false;
+	#recycleRequested = false;
+	#recycling = false;
+	#shuttingDown = false;
 	/** Max time to wait for in-flight PDF jobs to finish before closing the browser on shutdown. */
 	shutdownDrainTimeoutMs = 15e3;
-	browserTag;
-	useLockedBrowser;
-	buildId;
+	#browserTag;
+	#useLockedBrowser;
+	#buildId;
 	constructor(pdfParams) {
-		this.cacheDir = resolve(".cache/puppeteer-browser");
-		this.options = pdfParams;
-		this.loadBuildId();
-		this.loadBrowser();
-		this.loadBrowserTag();
-		this.loadUseLockedBrowser();
+		this.#cacheDir = resolve(".cache/puppeteer-browser");
+		this.#options = pdfParams;
+		this.#loadBuildId();
+		this.#loadBrowser();
+		this.#loadBrowserTag();
+		this.#loadUseLockedBrowser();
 	}
 	async onModuleDestroy() {
-		this.shuttingDown = true;
-		await this.waitForIdle(this.shutdownDrainTimeoutMs);
-		if (this._browserInstance?.connected) try {
-			await this._browserInstance.close();
+		this.#shuttingDown = true;
+		await this.#waitForIdle(this.shutdownDrainTimeoutMs);
+		if (this.#browserInstance?.connected) try {
+			await this.#browserInstance.close();
 		} catch (error) {
 			Logger.warn(`Failed to close browser on module destroy: ${error instanceof Error ? error.message : String(error)}`);
 		}
-		if (this.options?.cleanupBrowserCacheOnExit !== false) await this.cleanupCacheBestEffort();
+		if (this.#options?.cleanupBrowserCacheOnExit !== false) await this.#cleanupCacheBestEffort();
 	}
 	/** Wait until no PDF job is in flight, or until the timeout elapses. */
-	async waitForIdle(timeoutMs) {
+	async #waitForIdle(timeoutMs) {
 		const start = Date.now();
 		while (this.activeJobs > 0 && Date.now() - start < timeoutMs) await sleep(50);
 		if (this.activeJobs > 0) Logger.warn(`Shutdown: ${this.activeJobs} PDF job(s) still running after ${timeoutMs}ms, closing the browser anyway`);
 	}
 	async getBrowserInstance(args, headless, executablePathBin) {
-		if (!this._browserInstance?.connected) this._browserInstance = await this.launchBrowser(args, headless, executablePathBin);
-		return this._browserInstance;
+		if (!this.#browserInstance?.connected) this.#browserInstance = await this.#launchBrowser(args, headless, executablePathBin);
+		return this.#browserInstance;
 	}
 	async createContext(args, headless, executablePath) {
 		const browser = await this.getBrowserInstance(args, headless, executablePath);
@@ -431,41 +766,41 @@ let BrowserService = class BrowserService {
 		} catch (error) {
 			if (!isTargetClosedError(error)) throw error;
 			Logger.warn("Puppeteer browser closed while creating a context, retrying once");
-			this._browserInstance = null;
+			this.#browserInstance = null;
 			return await (await this.getBrowserInstance(args, headless, executablePath)).createBrowserContext();
 		}
 	}
 	markJobStarted() {
-		if (this.shuttingDown) throw new Error("nestjs-pdf is shutting down, refusing new PDF jobs");
+		if (this.#shuttingDown) throw new BrowserUnavailableException("nestjs-pdf is shutting down, refusing new PDF jobs");
 		this.activeJobs += 1;
 		this.totalJobs += 1;
-		if (this.totalJobs >= 200) this.recycleRequested = true;
+		if (this.totalJobs >= 200) this.#recycleRequested = true;
 	}
 	async markJobFinished() {
 		this.activeJobs = Math.max(0, this.activeJobs - 1);
 		await this.recycleBrowserIfNeeded();
 	}
 	async recycleBrowserIfNeeded() {
-		if (!this.recycleRequested) return;
-		if (this.recycling) return;
+		if (!this.#recycleRequested) return;
+		if (this.#recycling) return;
 		if (this.activeJobs > 0) return;
-		if (!this._browserInstance) return;
-		this.recycling = true;
+		if (!this.#browserInstance) return;
+		this.#recycling = true;
 		try {
-			if (this._browserInstance.connected) await this._browserInstance.close();
-			this._browserInstance = null;
+			if (this.#browserInstance.connected) await this.#browserInstance.close();
+			this.#browserInstance = null;
 			this.totalJobs = 0;
-			this.recycleRequested = false;
+			this.#recycleRequested = false;
 			Logger.log("Puppeteer browser recycled successfully");
 		} catch (error) {
 			Logger.warn(`Failed to recycle browser: ${error instanceof Error ? error.message : String(error)}`);
 		} finally {
-			this.recycling = false;
+			this.#recycling = false;
 		}
 	}
-	async cleanupCacheBestEffort() {
+	async #cleanupCacheBestEffort() {
 		const logger = new Logger("NestJsPdf");
-		const dir = this.cacheDir;
+		const dir = this.#cacheDir;
 		try {
 			if (!existsSync(dir)) return;
 			logger.log(`Cleanup puppeteer cache: ${dir}`);
@@ -486,115 +821,124 @@ let BrowserService = class BrowserService {
 		}
 	}
 	async install(lock = false) {
-		const browser = this.browser;
-		const versionTag = this.browserTag;
+		try {
+			return await this.#doInstall(lock);
+		} catch (error) {
+			if (error instanceof NestjsPdfException) throw error;
+			throw new BrowserInstallationException(`Could not install browser: ${String(error)}`, { cause: error });
+		}
+	}
+	async #doInstall(lock) {
+		const browser = this.#browser;
+		const versionTag = this.#browserTag;
 		const browserPlatform = detectBrowserPlatform() ?? BrowserPlatform.LINUX;
 		let buildId;
-		if (this.buildId === void 0) buildId = await resolveBuildId(browser, browserPlatform, versionTag);
-		else buildId = this.buildId;
+		if (this.#buildId === void 0) buildId = await resolveBuildId(browser, browserPlatform, versionTag);
+		else buildId = this.#buildId;
 		Logger.log(`Browser ${browser} ${versionTag} build id: ${buildId}`, "NestJsPdf");
 		if (await this.hasBrowserInstalled(browser, buildId)) {
 			Logger.log("Browser already installed", "NestJsPdf");
-			if (lock) this.writeLockFile(browser, buildId);
+			if (lock) this.#writeLockFile(browser, buildId);
 			return;
 		} else {
 			Logger.log("Starting browser installation", "NestJsPdf");
 			const installOption = {
-				cacheDir: this.cacheDir,
+				cacheDir: this.#cacheDir,
 				browser,
 				buildId,
-				baseUrl: this.options?.browserInstallBaseUrl ?? void 0
+				baseUrl: this.#options?.browserInstallBaseUrl ?? void 0
 			};
 			if (await canDownload(installOption)) {
 				Logger.log(`Installing ${installOption.browser} ${installOption.buildId}`, "NestJsPdf");
 				const installedBrowser = await install(installOption);
 				if (await this.hasBrowserInstalled(browser, buildId)) {
 					Logger.log("Browser installed successfully", "NestJsPdf");
-					if (lock) this.writeLockFile(browser, buildId);
+					if (lock) this.#writeLockFile(browser, buildId);
 					return installedBrowser;
 				} else Logger.error("Browser installation failed", "NestJsPdf");
 			} else Logger.error(`Error, can't install ${installOption.browser} ${installOption.buildId}`, "NestJsPdf");
 		}
 		return null;
 	}
-	loadBrowser() {
+	#loadBrowser() {
 		let browser;
-		if (this.options?.browser === void 0) browser = Browser.CHROMIUM;
-		else browser = this.options.browser;
-		this.browser = browser;
+		if (this.#options?.browser === void 0) browser = Browser$1.CHROMIUM;
+		else browser = this.#options.browser;
+		this.#browser = browser;
 	}
 	getBrowser() {
-		return this.browser;
+		return this.#browser;
 	}
-	loadBrowserTag() {
+	#loadBrowserTag() {
 		let versionTag;
-		if (this.options?.browserTag === void 0) {
-			if (this.browser === Browser.CHROMIUM) versionTag = "latest";
+		if (this.#options?.browserTag === void 0) {
+			if (this.#browser === Browser$1.CHROMIUM) versionTag = "latest";
 			else versionTag = "stable";
-		} else versionTag = this.options.browserTag;
-		this.browserTag = versionTag;
+		} else versionTag = this.#options.browserTag;
+		this.#browserTag = versionTag;
 	}
-	loadBuildId() {
+	#loadBuildId() {
 		let buildId;
-		if (this.options?.buildId === void 0) buildId = void 0;
-		else buildId = this.options.buildId;
-		this.buildId = buildId;
+		if (this.#options?.buildId === void 0) buildId = void 0;
+		else buildId = this.#options.buildId;
+		this.#buildId = buildId;
 	}
 	setBrowserTag(browserTag) {
-		this.browserTag = browserTag;
+		this.#browserTag = browserTag;
 	}
 	getBrowserTag() {
-		return this.browserTag;
+		return this.#browserTag;
 	}
 	getBuildId() {
-		return this.buildId;
+		return this.#buildId;
 	}
-	loadUseLockedBrowser() {
+	#loadUseLockedBrowser() {
 		let useLockedBrowser;
-		if (this.options?.useLockedBrowser === void 0) useLockedBrowser = false;
-		else useLockedBrowser = this.options.useLockedBrowser;
-		this.useLockedBrowser = useLockedBrowser;
+		if (this.#options?.useLockedBrowser === void 0) useLockedBrowser = false;
+		else useLockedBrowser = this.#options.useLockedBrowser;
+		this.#useLockedBrowser = useLockedBrowser;
 	}
 	async hasBrowserInstalled(browser, buildId) {
-		return (await getInstalledBrowsers({ cacheDir: this.cacheDir })).find((insBrowser) => {
+		return (await getInstalledBrowsers({ cacheDir: this.#cacheDir })).find((insBrowser) => {
 			return insBrowser.browser === browser && insBrowser.buildId === buildId;
 		}) !== void 0;
 	}
 	async getExecutablePath() {
-		const browser = this.browser;
-		const versionTag = this.browserTag;
+		const browser = this.#browser;
+		const versionTag = this.#browserTag;
 		const browserPlatform = detectBrowserPlatform() ?? BrowserPlatform.LINUX;
 		let buildId = null;
-		if (this.useLockedBrowser) {
+		if (this.#useLockedBrowser) {
 			buildId = this.getLockedBuildId(browser);
 			Logger.log(`Using locked browser ${buildId}`, "NestJsPdf");
 		}
 		buildId ??= await resolveBuildId(browser, browserPlatform, versionTag);
-		const installedBrowser = (await getInstalledBrowsers({ cacheDir: this.cacheDir })).find((insBrowser) => {
+		const installedBrowser = (await getInstalledBrowsers({ cacheDir: this.#cacheDir })).find((insBrowser) => {
 			return insBrowser.browser === browser && insBrowser.buildId === buildId;
 		});
 		if (installedBrowser === void 0) {
 			const newinstalledBrowser = await this.install();
-			if (newinstalledBrowser === null || newinstalledBrowser === void 0) throw new Error("Could not install browser");
+			if (newinstalledBrowser === null || newinstalledBrowser === void 0) throw new BrowserInstallationException("Could not install browser");
 			else return newinstalledBrowser.executablePath;
 		}
 		return installedBrowser.executablePath;
 	}
-	async launchBrowser(args, headless, executablePathBin) {
+	async #launchBrowser(args, headless, executablePathBin) {
 		const executablePath = executablePathBin ?? await this.getExecutablePath();
 		const browser = await launch({
 			executablePath,
 			headless,
-			args
+			args,
+			ignoreDefaultArgs: ["--disable-popup-blocking"]
 		});
 		browser.on("disconnected", () => {
 			Logger.warn("Puppeteer browser disconnected");
-			if (this._browserInstance === browser) this._browserInstance = null;
+			if (this.#browserInstance === browser) this.#browserInstance = null;
 		});
 		return browser;
 	}
-	writeLockFile(browser, buildId) {
-		const lockFile = resolve(this.cacheDir, `${browser}.lock`);
+	#writeLockFile(browser, buildId) {
+		const lockFile = resolve(this.#cacheDir, `${browser}.lock`);
 		const data = JSON.stringify({
 			browser,
 			buildId,
@@ -604,7 +948,7 @@ let BrowserService = class BrowserService {
 		Logger.log(`Browser ${browser} locked to build ${buildId}`, "NestJsPdf");
 	}
 	getLockedBuildId(browser) {
-		const lockFile = resolve(this.cacheDir, `${browser}.lock`);
+		const lockFile = resolve(this.#cacheDir, `${browser}.lock`);
 		if (existsSync(lockFile)) {
 			const data = readFileSync(lockFile);
 			return JSON.parse(data.toString()).buildId;
@@ -612,7 +956,7 @@ let BrowserService = class BrowserService {
 		return null;
 	}
 };
-BrowserService = __decorate$3([
+BrowserService = __decorate([
 	Injectable(),
 	__decorateParam(0, Inject("PDF_PARAMETERS")),
 	__decorateMetadata("design:paramtypes", [Object])
@@ -627,7 +971,7 @@ let EjsService = class EjsService {
 				...options
 			});
 		} catch (error) {
-			throw new Error(`EJS rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("EJS", `EJS rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 	async renderFile(filePath, data = {}, options) {
@@ -637,19 +981,19 @@ let EjsService = class EjsService {
 				...options
 			});
 		} catch (error) {
-			throw new Error(`EJS file rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("EJS", `EJS file rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 };
-EjsService = __decorate$3([Injectable()], EjsService);
+EjsService = __decorate([Injectable()], EjsService);
 //#endregion
 //#region src/puppeteer/engines/eta/eta.service.ts
 let EtaService = class EtaService {
-	eta;
-	templateCache = /* @__PURE__ */ new Map();
-	maxCacheSize = 100;
+	#eta;
+	#templateCache = /* @__PURE__ */ new Map();
+	#maxCacheSize = 100;
 	constructor() {
-		this.eta = new Eta({
+		this.#eta = new Eta({
 			cache: true,
 			autoEscape: true,
 			useWith: true
@@ -670,9 +1014,9 @@ let EtaService = class EtaService {
 				useWith: true,
 				...options,
 				varName: options.varName ?? "it"
-			}) : this.eta).renderString(template, data);
+			}) : this.#eta).renderString(template, data);
 		} catch (error) {
-			throw new Error(`Eta rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Eta", `Eta rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 	/**
@@ -686,53 +1030,54 @@ let EtaService = class EtaService {
 		try {
 			const resolvedPath = resolve(filePath);
 			const useCache = options?.cache ?? true;
-			let template = useCache ? this.templateCache.get(resolvedPath) : void 0;
+			let template = useCache ? this.#templateCache.get(resolvedPath) : void 0;
 			if (!template) {
 				template = readFileSync(resolvedPath, "utf-8");
-				if (useCache && this.templateCache.size < this.maxCacheSize) this.templateCache.set(resolvedPath, template);
+				if (useCache && this.#templateCache.size < this.#maxCacheSize) this.#templateCache.set(resolvedPath, template);
 			}
 			return this.render(template, data, options);
 		} catch (error) {
-			throw new Error(`Eta file rendering failed for ${filePath}: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Eta", `Eta file rendering failed for ${filePath}: ${String(error)}`, { cause: error });
 		}
 	}
 	/**
 	* Clear the template cache
 	*/
 	clearCache() {
-		this.templateCache.clear();
+		this.#templateCache.clear();
 	}
 	/**
 	* Get the current cache size
 	* @returns The number of cached templates
 	*/
 	getCacheSize() {
-		return this.templateCache.size;
+		return this.#templateCache.size;
 	}
 };
-EtaService = __decorate$3([Injectable(), __decorateMetadata("design:paramtypes", [])], EtaService);
+EtaService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [])], EtaService);
 //#endregion
 //#region src/puppeteer/engines/handlebars/handlebars.service.ts
 let HandlebarsService = class HandlebarsService {
-	cachedOptions;
-	cachedEnv;
+	#cachedOptions;
+	#cachedEnv;
 	render(template, parameters = {}, options = {}) {
 		try {
-			return this.getEnv(options).compile(template, options.compileOptions)(parameters, options.templateOptions);
+			return this.#getEnv(options).compile(template, options.compileOptions)(parameters, options.templateOptions);
 		} catch (error) {
-			throw new Error(`Handlebars rendering failed: ${String(error)}`, { cause: error });
+			if (error instanceof NestjsPdfException) throw error;
+			throw new TemplateRenderException("Handlebars", `Handlebars rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 	renderFile(file, parameters = {}, options = {}) {
-		if (options.templateDirectory === void 0) throw new Error("Handlebars file rendering failed: option `templateDirectory` is not set");
+		if (options.templateDirectory === void 0) throw new TemplateConfigurationException("Handlebars file rendering failed: option `templateDirectory` is not set");
 		const baseDir = resolve(process.cwd(), options.templateDirectory);
 		const templatePath = resolve(baseDir, file);
-		if (templatePath !== baseDir && !templatePath.startsWith(baseDir + sep)) throw new Error(`Handlebars file rendering failed: ’${file}’ resolves outside \`templateDirectory\``);
+		if (templatePath !== baseDir && !templatePath.startsWith(baseDir + sep)) throw new TemplateConfigurationException(`Handlebars file rendering failed: ’${file}’ resolves outside \`templateDirectory\``);
 		let template;
 		try {
 			template = readFileSync(templatePath, "utf8");
 		} catch (error) {
-			throw new Error(`Handlebars file rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Handlebars", `Handlebars file rendering failed: ${String(error)}`, { cause: error });
 		}
 		return this.render(template, parameters, options);
 	}
@@ -741,19 +1086,19 @@ let HandlebarsService = class HandlebarsService {
 	* nothing leaks into the global Handlebars. Memoised for the common case where
 	* the same options object is reused across calls (e.g. the module `hbsOptions`).
 	*/
-	getEnv(options) {
-		if (this.cachedEnv && this.cachedOptions === options) return this.cachedEnv;
+	#getEnv(options) {
+		if (this.#cachedEnv && this.#cachedOptions === options) return this.#cachedEnv;
 		const env = Handlebars.create();
 		for (const helper of options.helpers ?? []) env.registerHelper(helper.name, helper.fn);
-		this.registerPartials(env, options.partialDirectory);
-		this.cachedOptions = options;
-		this.cachedEnv = env;
+		this.#registerPartials(env, options.partialDirectory);
+		this.#cachedOptions = options;
+		this.#cachedEnv = env;
 		return env;
 	}
-	registerPartials(env, partialDirectory) {
+	#registerPartials(env, partialDirectory) {
 		if (partialDirectory === void 0) return;
 		const partialPath = join(process.cwd(), partialDirectory);
-		if (!existsSync(partialPath)) throw new Error(`Handlebars partial directory does not exist: ${partialPath}`);
+		if (!existsSync(partialPath)) throw new TemplateConfigurationException(`Handlebars partial directory does not exist: ${partialPath}`);
 		for (const entry of readdirSync(partialPath)) {
 			const filePath = join(partialPath, entry);
 			if (!statSync(filePath).isFile()) continue;
@@ -761,25 +1106,34 @@ let HandlebarsService = class HandlebarsService {
 		}
 	}
 };
-HandlebarsService = __decorate$3([Injectable()], HandlebarsService);
+HandlebarsService = __decorate([Injectable()], HandlebarsService);
 //#endregion
 //#region src/puppeteer/engines/mjml/mjml.service.ts
 let MjmlService = class MjmlService {
 	async render(template, options) {
-		const { html } = await mjml(template, options);
-		return html;
+		try {
+			const { html } = await mjml(template, options);
+			return html;
+		} catch (error) {
+			throw new TemplateRenderException("MJML", `MJML rendering failed: ${String(error)}`, { cause: error });
+		}
 	}
 	async renderFile(filePath, options) {
-		const template = readFileSync(filePath, "utf-8");
+		let template;
+		try {
+			template = readFileSync(filePath, "utf-8");
+		} catch (error) {
+			throw new TemplateRenderException("MJML", `MJML file rendering failed: ${String(error)}`, { cause: error });
+		}
 		return await this.render(template, options);
 	}
 };
-MjmlService = __decorate$3([Injectable()], MjmlService);
+MjmlService = __decorate([Injectable()], MjmlService);
 //#endregion
 //#region src/puppeteer/engines/mustache/mustache.service.ts
 let MustacheService = class MustacheService {
-	templateCache = /* @__PURE__ */ new Map();
-	maxCacheSize = 100;
+	#templateCache = /* @__PURE__ */ new Map();
+	#maxCacheSize = 100;
 	/**
 	* Render a Mustache template from a string
 	* @param template The template string to render
@@ -795,7 +1149,7 @@ let MustacheService = class MustacheService {
 				escape: options?.escape
 			});
 		} catch (error) {
-			throw new Error(`Mustache rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Mustache", `Mustache rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 	/**
@@ -808,31 +1162,31 @@ let MustacheService = class MustacheService {
 	renderFile(filePath, data = {}, options) {
 		try {
 			const resolvedPath = resolve(filePath);
-			let template = this.templateCache.get(resolvedPath);
+			let template = this.#templateCache.get(resolvedPath);
 			if (!template) {
 				template = readFileSync(resolvedPath, "utf-8");
-				if (this.templateCache.size < this.maxCacheSize) this.templateCache.set(resolvedPath, template);
+				if (this.#templateCache.size < this.#maxCacheSize) this.#templateCache.set(resolvedPath, template);
 			}
 			return this.render(template, data, options);
 		} catch (error) {
-			throw new Error(`Mustache file rendering failed for ${filePath}: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Mustache", `Mustache file rendering failed for ${filePath}: ${String(error)}`, { cause: error });
 		}
 	}
 	/**
 	* Clear the template cache
 	*/
 	clearCache() {
-		this.templateCache.clear();
+		this.#templateCache.clear();
 	}
 	/**
 	* Get the current cache size
 	* @returns The number of cached templates
 	*/
 	getCacheSize() {
-		return this.templateCache.size;
+		return this.#templateCache.size;
 	}
 };
-MustacheService = __decorate$3([Injectable()], MustacheService);
+MustacheService = __decorate([Injectable()], MustacheService);
 //#endregion
 //#region src/puppeteer/engines/nunjucks/nunjucks.service.ts
 let NunjucksService = class NunjucksService {
@@ -857,7 +1211,7 @@ let NunjucksService = class NunjucksService {
 			}
 			return nunjucks.renderString(template, data);
 		} catch (error) {
-			throw new Error(`Nunjucks rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Nunjucks", `Nunjucks rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 	renderFile(filePath, data = {}, options) {
@@ -874,11 +1228,11 @@ let NunjucksService = class NunjucksService {
 			}
 			return nunjucks.render(filePath, data);
 		} catch (error) {
-			throw new Error(`Nunjucks file rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Nunjucks", `Nunjucks file rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 };
-NunjucksService = __decorate$3([Injectable(), __decorateMetadata("design:paramtypes", [])], NunjucksService);
+NunjucksService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [])], NunjucksService);
 //#endregion
 //#region src/puppeteer/engines/pug/pug.service.ts
 let PugService = class PugService {
@@ -886,7 +1240,7 @@ let PugService = class PugService {
 		try {
 			return pug.compile(template, { ...options })(data);
 		} catch (error) {
-			throw new Error(`Pug rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Pug", `Pug rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 	renderFile(filePath, data = {}, options) {
@@ -894,44 +1248,49 @@ let PugService = class PugService {
 			const template = readFileSync(filePath, "utf-8");
 			return this.render(template, data, options);
 		} catch (error) {
-			throw new Error(`Pug file rendering failed: ${String(error)}`, { cause: error });
+			throw new TemplateRenderException("Pug", `Pug file rendering failed: ${String(error)}`, { cause: error });
 		}
 	}
 };
-PugService = __decorate$3([Injectable()], PugService);
+PugService = __decorate([Injectable()], PugService);
 //#endregion
 //#region src/puppeteer/libs/requireService.utils.ts
 function requireService(service, name) {
-	if (!service) throw new Error(`${name} service is not available. If the problem persists, open an issue in the repo.`);
+	if (!service) throw new EngineNotAvailableException(name);
 	return service;
 }
 //#endregion
 //#region src/puppeteer/puppeteer.service.ts
 let PuppeteerService = class PuppeteerService {
-	browserService;
-	options;
-	hbsService;
-	mjmlService;
-	pugService;
-	ejsService;
-	nunjucksService;
-	etaService;
-	mustacheService;
+	#browserService;
+	#options;
+	#hbsService;
+	#mjmlService;
+	#pugService;
+	#ejsService;
+	#nunjucksService;
+	#etaService;
+	#mustacheService;
 	constructor(browserService, options, hbsService, mjmlService, pugService, ejsService, nunjucksService, etaService, mustacheService) {
-		this.browserService = browserService;
-		this.options = options;
-		this.hbsService = hbsService;
-		this.mjmlService = mjmlService;
-		this.pugService = pugService;
-		this.ejsService = ejsService;
-		this.nunjucksService = nunjucksService;
-		this.etaService = etaService;
-		this.mustacheService = mustacheService;
-	}
-	limit = pLimit(3);
+		this.#browserService = browserService;
+		this.#options = options;
+		this.#hbsService = hbsService;
+		this.#mjmlService = mjmlService;
+		this.#pugService = pugService;
+		this.#ejsService = ejsService;
+		this.#nunjucksService = nunjucksService;
+		this.#etaService = etaService;
+		this.#mustacheService = mustacheService;
+	}
+	#limit = pLimit(3);
 	async generatePdfFromHtml(html, options) {
-		return this.limit(async () => {
-			const mergePuppeteerOptions = mergePuppeteerParameters(this.options, options);
+		const signal = options?.signal ?? this.#options.signal;
+		signal?.throwIfAborted();
+		let started = false;
+		const job = this.#limit(async () => {
+			signal?.throwIfAborted();
+			started = true;
+			const mergePuppeteerOptions = mergePuppeteerParameters(this.#options, options);
 			if (mergePuppeteerOptions.chromiumRevision !== void 0) Logger.warn("Using `chromiumRevision` is no longer supported since the puppeteer update.");
 			const headless = mergePuppeteerOptions.headless ?? true;
 			const executablePath = mergePuppeteerOptions.executablePath || void 0;
@@ -952,7 +1311,6 @@ let PuppeteerService = class PuppeteerService {
 				"--disable-ipc-flooding-protection",
 				"--disable-notifications",
 				"--disable-offer-store-unmasked-wallet-cards",
-				"--disable-popup-blocking",
 				"--disable-print-preview",
 				"--disable-prompt-on-repost",
 				"--disable-renderer-backgrounding",
@@ -973,11 +1331,20 @@ let PuppeteerService = class PuppeteerService {
 				"--no-zygote",
 				"--disable-gpu"
 			];
-			this.browserService.markJobStarted();
+			this.#browserService.markJobStarted();
 			let context = null;
+			let closing;
+			const onAbort = () => {
+				if (!context) return;
+				closing = context.close();
+				closing.catch(() => void 0);
+			};
+			signal?.addEventListener("abort", onAbort, { once: true });
 			try {
-				context = await this.browserService.createContext(args, headless, executablePath);
+				context = await this.#browserService.createContext(args, headless, executablePath);
+				signal?.throwIfAborted();
 				const page = await context.newPage();
+				if (mergePuppeteerOptions.security) await installRequestGuard(context, page, mergePuppeteerOptions.security);
 				const pdfOptions = mergePuppeteerOptions.pdfOptions ?? { format: "A4" };
 				await page.setContent(html, { waitUntil: "domcontentloaded" });
 				await page.emulateMediaType("screen");
@@ -987,78 +1354,97 @@ let PuppeteerService = class PuppeteerService {
 				});
 				/* v8 ignore next */
 				await page.evaluate(() => document.fonts.ready);
-				return await page.pdf(pdfOptions);
+				const pdf = await page.pdf(pdfOptions);
+				signal?.throwIfAborted();
+				return mergePuppeteerOptions.watermark ? await addWatermark(pdf, mergePuppeteerOptions.watermark) : pdf;
 			} catch (e) {
+				if (signal?.aborted) throw signal.reason;
 				Logger.error(e);
-				throw e;
+				if (e instanceof NestjsPdfException) throw e;
+				throw new PdfGenerationException(`PDF generation failed: ${String(e)}`, { cause: e });
 			} finally {
+				signal?.removeEventListener("abort", onAbort);
 				if (context) try {
-					await context.close();
+					if (closing) await closing;
+					else await context.close();
 				} catch (error) {
 					Logger.error(error);
 				}
-				await this.browserService.markJobFinished();
+				await this.#browserService.markJobFinished();
 			}
 		});
+		if (!signal) return job;
+		let onQueuedAbort;
+		const abortedWhileQueued = new Promise((_, reject) => {
+			onQueuedAbort = () => {
+				if (!started) reject(signal.reason);
+			};
+			signal.addEventListener("abort", onQueuedAbort, { once: true });
+		});
+		try {
+			return await Promise.race([job, abortedWhileQueued]);
+		} finally {
+			signal.removeEventListener("abort", onQueuedAbort);
+		}
 	}
 	async generatePdfFromTemplateHbsString(template, parameters = {}, options) {
-		const html = requireService(this.hbsService, "Handlebars").render(template, parameters, options?.hbsOptions ?? this.options.hbsOptions);
+		const html = requireService(this.#hbsService, "Handlebars").render(template, parameters, options?.hbsOptions ?? this.#options.hbsOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromTemplateHbsFile(file, parameters = {}, options) {
-		const html = requireService(this.hbsService, "Handlebars").renderFile(file, parameters, options?.hbsOptions ?? this.options.hbsOptions);
+		const html = requireService(this.#hbsService, "Handlebars").renderFile(file, parameters, options?.hbsOptions ?? this.#options.hbsOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromMjmlString(template, options) {
-		const html = await requireService(this.mjmlService, "MJML").render(template, options?.mjmlOptions ?? this.options.mjmlOptions);
+		const html = await requireService(this.#mjmlService, "MJML").render(template, options?.mjmlOptions ?? this.#options.mjmlOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromMjmlFile(file, options) {
-		const html = await requireService(this.mjmlService, "MJML").renderFile(file, options?.mjmlOptions ?? this.options.mjmlOptions);
+		const html = await requireService(this.#mjmlService, "MJML").renderFile(file, options?.mjmlOptions ?? this.#options.mjmlOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromPugString(template, data = {}, options) {
-		const html = requireService(this.pugService, "Pug").render(template, data, options?.pugOptions ?? this.options.pugOptions);
+		const html = requireService(this.#pugService, "Pug").render(template, data, options?.pugOptions ?? this.#options.pugOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromPugFile(file, data = {}, options) {
-		const html = requireService(this.pugService, "Pug").renderFile(file, data, options?.pugOptions ?? this.options.pugOptions);
+		const html = requireService(this.#pugService, "Pug").renderFile(file, data, options?.pugOptions ?? this.#options.pugOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromEjsString(template, data = {}, options) {
-		const html = await requireService(this.ejsService, "EJS").render(template, data, options?.ejsOptions ?? this.options.ejsOptions);
+		const html = await requireService(this.#ejsService, "EJS").render(template, data, options?.ejsOptions ?? this.#options.ejsOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromEjsFile(file, data = {}, options) {
-		const html = await requireService(this.ejsService, "EJS").renderFile(file, data, options?.ejsOptions ?? this.options.ejsOptions);
+		const html = await requireService(this.#ejsService, "EJS").renderFile(file, data, options?.ejsOptions ?? this.#options.ejsOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromNunjucksString(template, data = {}, options) {
-		const html = requireService(this.nunjucksService, "Nunjucks").render(template, data, options?.nunjucksOptions ?? this.options.nunjucksOptions);
+		const html = requireService(this.#nunjucksService, "Nunjucks").render(template, data, options?.nunjucksOptions ?? this.#options.nunjucksOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromNunjucksFile(file, data = {}, options) {
-		const html = requireService(this.nunjucksService, "Nunjucks").renderFile(file, data, options?.nunjucksOptions ?? this.options.nunjucksOptions);
+		const html = requireService(this.#nunjucksService, "Nunjucks").renderFile(file, data, options?.nunjucksOptions ?? this.#options.nunjucksOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromEtaString(template, data = {}, options) {
-		const html = requireService(this.etaService, "Eta").render(template, data, options?.etaOptions ?? this.options.etaOptions);
+		const html = requireService(this.#etaService, "Eta").render(template, data, options?.etaOptions ?? this.#options.etaOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromEtaFile(file, data = {}, options) {
-		const html = requireService(this.etaService, "Eta").renderFile(file, data, options?.etaOptions ?? this.options.etaOptions);
+		const html = requireService(this.#etaService, "Eta").renderFile(file, data, options?.etaOptions ?? this.#options.etaOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromMustacheString(template, data = {}, options) {
-		const html = requireService(this.mustacheService, "Mustache").render(template, data, options?.mustacheOptions ?? this.options.mustacheOptions);
+		const html = requireService(this.#mustacheService, "Mustache").render(template, data, options?.mustacheOptions ?? this.#options.mustacheOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 	async generatePdfFromMustacheFile(file, data = {}, options) {
-		const html = requireService(this.mustacheService, "Mustache").renderFile(file, data, options?.mustacheOptions ?? this.options.mustacheOptions);
+		const html = requireService(this.#mustacheService, "Mustache").renderFile(file, data, options?.mustacheOptions ?? this.#options.mustacheOptions);
 		return this.generatePdfFromHtml(html, options);
 	}
 };
-PuppeteerService = __decorate$3([
+PuppeteerService = __decorate([
 	Injectable(),
 	__decorateParam(1, Inject(PDF_PARAMETERS)),
 	__decorateParam(2, Optional()),
@@ -1083,9 +1469,9 @@ PuppeteerService = __decorate$3([
 //#endregion
 //#region src/nestjs-pdf.service.ts
 let NestjsPdfService = class NestjsPdfService {
-	puppeteerService;
+	#puppeteerService;
 	constructor(puppeteerService) {
-		this.puppeteerService = puppeteerService;
+		this.#puppeteerService = puppeteerService;
 	}
 	/**
 	* @param html HTML string to convert to PDF
@@ -1094,7 +1480,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method uses the Puppeteer service to generate a PDF from an HTML string. Generation options can be customized by passing a `PuppeteerParameters` object as the second argument. This allows you to control various aspects of PDF rendering, such as page size, margins, background display, etc. If no options are provided, the default parameters defined in the Puppeteer service will be used.
 	*/
 	generatePdfFromHtml(html, options) {
-		return this.puppeteerService.generatePdfFromHtml(html, options);
+		return this.#puppeteerService.generatePdfFromHtml(html, options);
 	}
 	/**
 	* @param template Handlebars template string
@@ -1104,7 +1490,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Handlebars template provided as a string. The parameters to inject into the template are passed in the `parameters` object, which is used to render the template before converting it to PDF. PDF generation options can also be customized by passing a `PuppeteerParameters` object as the third argument. This allows you to control various aspects of PDF rendering, such as page size, margins, background display, etc. If no options are provided, the default parameters defined in the Puppeteer service will be used.
 	*/
 	generatePdfFromTemplateHbsString(template, parameters = {}, options) {
-		return this.puppeteerService.generatePdfFromTemplateHbsString(template, parameters, options);
+		return this.#puppeteerService.generatePdfFromTemplateHbsString(template, parameters, options);
 	}
 	/**
 	* @param file Path to the Handlebars template file
@@ -1114,7 +1500,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Handlebars template located at the specified file path. The file path is passed as a string in the `file` parameter. The parameters to inject into the template are passed in the `parameters` object, which is used to render the template before converting it to PDF. PDF generation options can also be customized by passing a `PuppeteerParameters` object as the third argument. This allows you to control various aspects of PDF rendering, such as page size, margins, background display, etc. If no options are provided, the default parameters defined in the Puppeteer service will be used.
 	*/
 	generatePdfFromTemplateHbsFile(file, parameters = {}, options) {
-		return this.puppeteerService.generatePdfFromTemplateHbsFile(file, parameters, options);
+		return this.#puppeteerService.generatePdfFromTemplateHbsFile(file, parameters, options);
 	}
 	/**
 	* @param template MJML template string
@@ -1123,7 +1509,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from an MJML template provided as a string. MJML (MJML Markup Language) is a markup language designed to reduce the pain of coding a responsive email. The template is first rendered to HTML using the MJML renderer, then converted to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the second argument.
 	*/
 	generatePdfFromMjmlString(template, options) {
-		return this.puppeteerService.generatePdfFromMjmlString(template, options);
+		return this.#puppeteerService.generatePdfFromMjmlString(template, options);
 	}
 	/**
 	* @param file Path to the MJML template file
@@ -1132,7 +1518,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from an MJML template located at the specified file path. The file path is passed as a string in the `file` parameter. The template is first rendered to HTML using the MJML renderer, then converted to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the second argument.
 	*/
 	generatePdfFromMjmlFile(file, options) {
-		return this.puppeteerService.generatePdfFromMjmlFile(file, options);
+		return this.#puppeteerService.generatePdfFromMjmlFile(file, options);
 	}
 	/**
 	* @param template EJS template string
@@ -1142,7 +1528,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from an EJS (Embedded JavaScript) template provided as a string. EJS is a templating language with a simple, straightforward syntax. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromEjsString(template, data = {}, options) {
-		return this.puppeteerService.generatePdfFromEjsString(template, data, options);
+		return this.#puppeteerService.generatePdfFromEjsString(template, data, options);
 	}
 	/**
 	* @param file Path to the EJS template file
@@ -1152,7 +1538,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from an EJS template located at the specified file path. The file path is passed as a string in the `file` parameter. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromEjsFile(file, data = {}, options) {
-		return this.puppeteerService.generatePdfFromEjsFile(file, data, options);
+		return this.#puppeteerService.generatePdfFromEjsFile(file, data, options);
 	}
 	/**
 	* @param template Pug template string
@@ -1162,7 +1548,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Pug template provided as a string. Pug is a clean, whitespace-sensitive syntax for writing HTML. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromPugString(template, data = {}, options) {
-		return this.puppeteerService.generatePdfFromPugString(template, data, options);
+		return this.#puppeteerService.generatePdfFromPugString(template, data, options);
 	}
 	/**
 	* @param file Path to the Pug template file
@@ -1172,7 +1558,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Pug template located at the specified file path. The file path is passed as a string in the `file` parameter. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromPugFile(file, data = {}, options) {
-		return this.puppeteerService.generatePdfFromPugFile(file, data, options);
+		return this.#puppeteerService.generatePdfFromPugFile(file, data, options);
 	}
 	/**
 	* @param template Nunjucks template string
@@ -1182,7 +1568,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Nunjucks template provided as a string. Nunjucks is a powerful templating language with support for inheritance, macros, and filters. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromNunjucksString(template, data = {}, options) {
-		return this.puppeteerService.generatePdfFromNunjucksString(template, data, options);
+		return this.#puppeteerService.generatePdfFromNunjucksString(template, data, options);
 	}
 	/**
 	* @param file Path to the Nunjucks template file
@@ -1192,7 +1578,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Nunjucks template located at the specified file path. The file path is passed as a string in the `file` parameter. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromNunjucksFile(file, data = {}, options) {
-		return this.puppeteerService.generatePdfFromNunjucksFile(file, data, options);
+		return this.#puppeteerService.generatePdfFromNunjucksFile(file, data, options);
 	}
 	/**
 	* @param template Eta template string
@@ -1202,7 +1588,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from an Eta template provided as a string. Eta is a fast and lightweight embedded templating language with a syntax similar to EJS but with better performance. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromEtaString(template, data = {}, options) {
-		return this.puppeteerService.generatePdfFromEtaString(template, data, options);
+		return this.#puppeteerService.generatePdfFromEtaString(template, data, options);
 	}
 	/**
 	* @param file Path to the Eta template file
@@ -1212,7 +1598,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from an Eta template located at the specified file path. The file path is passed as a string in the `file` parameter. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromEtaFile(file, data = {}, options) {
-		return this.puppeteerService.generatePdfFromEtaFile(file, data, options);
+		return this.#puppeteerService.generatePdfFromEtaFile(file, data, options);
 	}
 	/**
 	* @param template Mustache template string
@@ -1222,7 +1608,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Mustache template provided as a string. Mustache is a logic-less template language that emphasizes readable and simple templates. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromMustacheString(template, data = {}, options) {
-		return this.puppeteerService.generatePdfFromMustacheString(template, data, options);
+		return this.#puppeteerService.generatePdfFromMustacheString(template, data, options);
 	}
 	/**
 	* @param file Path to the Mustache template file
@@ -1232,7 +1618,7 @@ let NestjsPdfService = class NestjsPdfService {
 	* @description This method generates a PDF from a Mustache template located at the specified file path. The file path is passed as a string in the `file` parameter. The data to inject into the template is passed in the `data` object, which is used to render the template before converting it to PDF. PDF generation options can be customized by passing a `PuppeteerParameters` object as the third argument.
 	*/
 	generatePdfFromMustacheFile(file, data = {}, options) {
-		return this.puppeteerService.generatePdfFromMustacheFile(file, data, options);
+		return this.#puppeteerService.generatePdfFromMustacheFile(file, data, options);
 	}
 	/**
 	* @param pdf The PDF bytes to modify
@@ -1259,1307 +1645,57 @@ let NestjsPdfService = class NestjsPdfService {
 	async addSignatureFieldSignatureDebtorRaw(pdf, fieldName = "SignatureDebtor", anchorText = "__SIG_DEBTOR_ANCHOR__") {
 		return await addSignatureFieldUsingAnchor(pdf, fieldName, anchorText);
 	}
-};
-NestjsPdfService = __decorate$3([Injectable(), __decorateMetadata("design:paramtypes", [typeof PuppeteerService === "undefined" ? Object : PuppeteerService])], NestjsPdfService);
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config.constants.js
-var import_main = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
-	function _resolveEscapeSequences(value) {
-		return value.replace(/\\\$/g, "$");
-	}
-	function expandValue(value, processEnv, runningParsed) {
-		const env = {
-			...runningParsed,
-			...processEnv
-		};
-		const regex = /(?<!\\)\${([^{}]+)}|(?<!\\)\$([A-Za-z_][A-Za-z0-9_]*)/g;
-		let result = value;
-		let match;
-		const seen = /* @__PURE__ */ new Set();
-		while ((match = regex.exec(result)) !== null) {
-			seen.add(result);
-			const [template, bracedExpression, unbracedExpression] = match;
-			const expression = bracedExpression || unbracedExpression;
-			const opMatch = expression.match(/(:\+|\+|:-|-)/);
-			const splitter = opMatch ? opMatch[0] : null;
-			const r = expression.split(splitter);
-			let defaultValue;
-			let value;
-			const key = r.shift();
-			if ([":+", "+"].includes(splitter)) {
-				defaultValue = env[key] ? r.join(splitter) : "";
-				value = null;
-			} else {
-				defaultValue = r.join(splitter);
-				value = env[key];
-			}
-			if (value) {
-				if (seen.has(value)) result = result.replace(template, defaultValue);
-				else result = result.replace(template, value);
-			} else result = result.replace(template, defaultValue);
-			if (result === runningParsed[key]) break;
-			regex.lastIndex = 0;
-		}
-		return result;
-	}
-	function expand(options) {
-		const runningParsed = {};
-		let processEnv = process.env;
-		if (options && options.processEnv != null) processEnv = options.processEnv;
-		for (const key in options.parsed) {
-			let value = options.parsed[key];
-			if (processEnv[key] && processEnv[key] !== value) value = processEnv[key];
-			else value = expandValue(value, processEnv, runningParsed);
-			options.parsed[key] = _resolveEscapeSequences(value);
-			runningParsed[key] = _resolveEscapeSequences(value);
-		}
-		for (const processKey in options.parsed) processEnv[processKey] = options.parsed[processKey];
-		return options;
-	}
-	module.exports.expand = expand;
-})))();
-/**
-* Injection tokens
-*/
-const CONFIGURATION_SERVICE_TOKEN = Symbol("CONFIG_SERVICE");
-const CONFIGURATION_TOKEN = "CONFIGURATION_TOKEN";
-const CONFIGURATION_LOADER = "CONFIGURATION_LOADER";
-const VALIDATED_ENV_LOADER = "VALIDATED_ENV_LOADER";
-const PARTIAL_CONFIGURATION_KEY = "PARTIAL_CONFIGURATION_KEY";
-const VALIDATED_ENV_PROPNAME = "_PROCESS_ENV_VALIDATED";
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/_internal/isUnsafeProperty.mjs
-/**
-* Checks if a property key is unsafe to access or copy directly.
-*
-* This function is used in functions like `get`, `unset`, and `merge` to prevent
-* prototype pollution attacks by identifying `__proto__`, which modifies the object's
-* prototype chain. `constructor` and `prototype` stay accessible here because lodash
-* keeps reads of them unrestricted; write paths use `isUnsafeToWriteProperty` instead,
-* which also blocks those keys.
-*
-* @param key - The property key to check
-* @returns `true` if the property is unsafe to access directly, `false` otherwise
-* @internal
-*/
-function isUnsafeProperty(key) {
-	return key === "__proto__";
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/isDeepKey.mjs
-/** Matches any deep property path. Examples: `a.b`, `a[0]`, `a["b"]` */
-const regexIsDeepProp$1 = /\.|(\[(?:[^[\]]*|(["'])(?:(?!\2)[^\\]|\\.)*?\2)\])/;
-/**
-* Checks if a given key is a deep key.
-*
-* A deep key is a string that contains a dot (.) or square brackets with a property accessor.
-*
-* @param {PropertyKey} key - The key to check.
-* @returns {boolean} - Returns true if the key is a deep key, otherwise false.
-*
-* Examples:
-*
-* isDeepKey('a.b') // true
-* isDeepKey('a[b]') // true
-* isDeepKey('a') // false
-* isDeepKey(123) // false
-* isDeepKey('a.b.c') // true
-* isDeepKey('a[b][c]') // true
-* isDeepKey('a.') // false
-* isDeepKey('.a') // false
-* isDeepKey('a[b') // false
-* isDeepKey('a]b]') // false
-* isDeepKey('a][b') // false
-* isDeepKey('') // false
-* isDeepKey('a[0]') // true
-*
-*/
-function isDeepKey(key) {
-	switch (typeof key) {
-		case "number":
-		case "symbol": return false;
-		case "string":
-			if (key === "" || key.startsWith(".") || key.endsWith(".")) return false;
-			return regexIsDeepProp$1.test(key);
-		default: return false;
-	}
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/toKey.mjs
-/**
-* Converts `value` to a string key if it's not a string or symbol.
-*
-* @private
-* @param {unknown} value The value to inspect.
-* @returns {string|symbol} Returns the key.
-*/
-function toKey(value) {
-	if (typeof value === "string" || typeof value === "symbol") return value;
-	if (Object.is(value?.valueOf?.(), -0)) return "-0";
-	return String(value);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/util/toString.mjs
-/**
-* Converts `value` to a string.
-*
-* An empty string is returned for `null` and `undefined` values.
-* The sign of `-0` is preserved.
-*
-* @param value - The value to convert.
-* @returns Returns the converted string.
-*
-* @example
-* toString(null) // returns ''
-* toString(undefined) // returns ''
-* toString(-0) // returns '-0'
-* toString([1, 2, -0]) // returns '1,2,-0'
-* toString([Symbol('a'), Symbol('b')]) // returns 'Symbol(a),Symbol(b)'
-*/
-function toString(value) {
-	if (value == null) return "";
-	return baseToString(value);
-}
-function baseToString(value) {
-	if (typeof value === "string") return value;
-	if (Array.isArray(value)) return value.map(baseToString).join(",");
-	const result = String(value);
-	if (result === "0" && Object.is(Number(value), -0)) return "-0";
-	return result;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/util/toPath.mjs
-/**
-* Converts a deep key string into an array of path segments.
-*
-* This function takes a string representing a deep key (e.g., 'a.b.c' or 'a[b][c]') and breaks it down into an array of strings, each representing a segment of the path.
-*
-* @param deepKey - The deep key string to convert.
-* @returns An array of strings, each representing a segment of the path.
-*
-* Examples:
-*
-* toPath('a.b.c') // Returns ['a', 'b', 'c']
-* toPath('a[b][c]') // Returns ['a', 'b', 'c']
-* toPath('.a.b.c') // Returns ['', 'a', 'b', 'c']
-* toPath('a["b.c"].d') // Returns ['a', 'b.c', 'd']
-* toPath('') // Returns []
-* toPath('.a[b].c.d[e]["f.g"].h') // Returns ['', 'a', 'b', 'c', 'd', 'e', 'f.g', 'h']
-*/
-function toPath(deepKey) {
-	if (Array.isArray(deepKey)) return deepKey.map(toKey);
-	if (typeof deepKey === "symbol") return [deepKey];
-	deepKey = toString(deepKey);
-	const result = [];
-	const length = deepKey.length;
-	if (length === 0) return result;
-	let index = 0;
-	let key = "";
-	let quoteChar = "";
-	let bracket = false;
-	let bracketHadQuote = false;
-	const bracketNumberRegex = /^-?\d+(?:\.\d+)?$/;
-	if (deepKey.charCodeAt(0) === 46) result.push("");
-	while (index < length) {
-		const char = deepKey[index];
-		if (quoteChar) if (char === "\\" && index + 1 < length) {
-			index++;
-			key += deepKey[index];
-		} else if (char === quoteChar) quoteChar = "";
-		else key += char;
-		else if (bracket) if (char === "\"" || char === "'") {
-			quoteChar = char;
-			bracketHadQuote = true;
-		} else if (char === "]") {
-			bracket = false;
-			if (!bracketHadQuote && key.includes(".") && !bracketNumberRegex.test(key)) {
-				const segments = key.split(".");
-				for (let i = 0; i < segments.length; i++) if (segments[i] !== "") result.push(segments[i]);
-			} else result.push(key);
-			key = "";
-		} else key += char;
-		else if (char === "[") {
-			bracket = true;
-			bracketHadQuote = false;
-			if (key) {
-				result.push(key);
-				key = "";
-			}
-		} else if (char === ".") {
-			if (key) {
-				result.push(key);
-				key = "";
-			}
-			const next = deepKey[index + 1];
-			if (next === void 0 || next === ".") result.push("");
-		} else key += char;
-		index++;
-	}
-	if (key) result.push(key);
-	return result;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/get.mjs
-/**
-* Retrieves the value at a given path from an object. If the resolved value is undefined, the defaultValue is returned instead.
-*
-* @param object - The object to query.
-* @param path - The path of the property to get.
-* @param [defaultValue] - The value returned if the resolved value is undefined.
-* @returns Returns the resolved value.
-*
-* @example
-* const object = { a: { b: { c: 1 } } };
-* get(object, 'a.b.c');
-* // => 1
-*
-* get(object, ['a', 'b', 'c']);
-* // => 1
-*
-* get(object, 'a.b.d', 'default');
-* // => 'default'
-*/
-function get(object, path, defaultValue) {
-	if (object == null) return defaultValue;
-	switch (typeof path) {
-		case "string": {
-			if (isUnsafeProperty(path)) return defaultValue;
-			const result = object[path];
-			if (result === void 0) if (isDeepKey(path) && !Object.hasOwn(object, path)) return get(object, toPath(path), defaultValue);
-			else return defaultValue;
-			return result;
-		}
-		case "number":
-		case "symbol": {
-			if (typeof path === "number") path = toKey(path);
-			const result = object[path];
-			if (result === void 0) return defaultValue;
-			return result;
-		}
-		default: {
-			if (Array.isArray(path)) return getWithPath(object, path, defaultValue);
-			if (Object.is(path?.valueOf(), -0)) path = "-0";
-			else path = String(path);
-			if (isUnsafeProperty(path)) return defaultValue;
-			const result = object[path];
-			if (result === void 0) return defaultValue;
-			return result;
-		}
-	}
-}
-function getWithPath(object, path, defaultValue) {
-	if (path.length === 0) return defaultValue;
-	let current = object;
-	for (let index = 0; index < path.length; index++) {
-		if (current == null) return defaultValue;
-		if (isUnsafeProperty(path[index])) return defaultValue;
-		current = current[path[index]];
-	}
-	if (current === void 0) return defaultValue;
-	return current;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/isIndex.mjs
-const IS_UNSIGNED_INTEGER = /^(?:0|[1-9]\d*)$/;
-function isIndex(value, length = Number.MAX_SAFE_INTEGER) {
-	switch (typeof value) {
-		case "number": return Number.isInteger(value) && value >= 0 && value < length;
-		case "symbol": return false;
-		case "string": return IS_UNSIGNED_INTEGER.test(value);
-	}
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/getTag.mjs
-/**
-* Gets the `toStringTag` of `value`.
-*
-* @private
-* @param {T} value The value to query.
-* @returns {string} Returns the `Object.prototype.toString.call` result.
-*/
-function getTag(value) {
-	if (value == null) return value === void 0 ? "[object Undefined]" : "[object Null]";
-	return Object.prototype.toString.call(value);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/predicate/isArguments.mjs
-/**
-* Checks if the given value is an arguments object.
-*
-* This function tests whether the provided value is an arguments object or not.
-* It returns `true` if the value is an arguments object, and `false` otherwise.
-*
-* This function can also serve as a type predicate in TypeScript, narrowing the type of the argument to an arguments object.
-*
-* @param value - The value to test if it is an arguments object.
-* @returns `true` if the value is an arguments, `false` otherwise.
-*
-* @example
-* const args = (function() { return arguments; })();
-* const strictArgs = (function() { 'use strict'; return arguments; })();
-* const value = [1, 2, 3];
-*
-* console.log(isArguments(args)); // true
-* console.log(isArguments(strictArgs)); // true
-* console.log(isArguments(value)); // false
-*/
-function isArguments(value) {
-	return value !== null && typeof value === "object" && getTag(value) === "[object Arguments]";
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/has.mjs
-/**
-* Checks if a given path exists within an object.
-*
-* You can provide the path as a single property key, an array of property keys,
-* or a string representing a deep path.
-*
-* If the path is an index and the object is an array or an arguments object, the function will verify
-* if the index is valid and within the bounds of the array or arguments object, even if the array or
-* arguments object is sparse (i.e., not all indexes are defined).
-*
-* @param object - The object to query.
-* @param path - The path to check. This can be a single property key,
-*        an array of property keys, or a string representing a deep path.
-* @returns Returns `true` if the path exists in the object, `false` otherwise.
-*
-* @example
-*
-* const obj = { a: { b: { c: 3 } } };
-*
-* has(obj, 'a'); // true
-* has(obj, ['a', 'b']); // true
-* has(obj, ['a', 'b', 'c']); // true
-* has(obj, 'a.b.c'); // true
-* has(obj, 'a.b.d'); // false
-* has(obj, ['a', 'b', 'c', 'd']); // false
-* has([], 0); // false
-* has([1, 2, 3], 2); // true
-* has([1, 2, 3], 5); // false
-*/
-function has(object, path) {
-	let resolvedPath;
-	if (Array.isArray(path)) resolvedPath = path;
-	else if (typeof path === "string" && isDeepKey(path) && !(path in Object(object))) resolvedPath = toPath(path);
-	else resolvedPath = [path];
-	if (resolvedPath.length === 0) return false;
-	let current = object;
-	for (let i = 0; i < resolvedPath.length; i++) {
-		const key = resolvedPath[i];
-		if (current == null || !Object.hasOwn(current, key)) {
-			if (!((Array.isArray(current) || isArguments(current)) && isIndex(key) && key < current.length)) return false;
-		}
-		current = current[key];
-	}
-	return true;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/predicate/isObject.mjs
-/**
-* Checks if the given value is an object. An object is a value that is
-* not a primitive type (string, number, boolean, symbol, null, or undefined).
-*
-* This function tests whether the provided value is an object or not.
-* It returns `true` if the value is an object, and `false` otherwise.
-*
-* This function can also serve as a type predicate in TypeScript, narrowing the type of the argument to an object value.
-*
-* @param value - The value to check if it is an object.
-* @returns `true` if the value is an object, `false` otherwise.
-*
-* @example
-* const value1 = {};
-* const value2 = [1, 2, 3];
-* const value3 = () => {};
-* const value4 = null;
-*
-* console.log(isObject(value1)); // true
-* console.log(isObject(value2)); // true
-* console.log(isObject(value3)); // true
-* console.log(isObject(value4)); // false
-*/
-function isObject$1(value) {
-	return value !== null && (typeof value === "object" || typeof value === "function");
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/predicate/isSymbol.mjs
-/**
-* Check whether a value is a symbol.
-*
-* This function can also serve as a type predicate in TypeScript, narrowing the type of the argument to `symbol`.
-*
-* @param value The value to check.
-* @returns Returns `true` if `value` is a symbol, else `false`.
-* @example
-* isSymbol(Symbol.iterator);
-* // => true
-*
-* isSymbol('abc');
-* // => false
-*/
-function isSymbol(value) {
-	return typeof value === "symbol" || value instanceof Symbol;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/isKey.mjs
-/**  Matches any deep property path. (e.g. `a.b[0].c`)*/
-const regexIsDeepProp = /\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/;
-/**  Matches any word character (alphanumeric & underscore).*/
-const regexIsPlainProp = /^\w*$/;
-/**
-* Checks if `value` is a property name and not a property path. (It's ok that the `value` is not in the keys of the `object`)
-* @param {unknown} value The value to check.
-* @param {unknown} object The object to query.
-* @returns {boolean} Returns `true` if `value` is a property name, else `false`.
-*
-* @example
-* isKey('a', { a: 1 });
-* // => true
-*
-* isKey('a.b', { a: { b: 2 } });
-* // => false
-*/
-function isKey(value, object) {
-	if (Array.isArray(value)) return false;
-	if (typeof value === "number" || typeof value === "boolean" || value == null || isSymbol(value)) return true;
-	return typeof value === "string" && (regexIsPlainProp.test(value) || !regexIsDeepProp.test(value)) || object != null && Object.hasOwn(object, value);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/util/eq.mjs
-/**
-* Performs a `SameValueZero` comparison between two values to determine if they are equivalent.
-*
-* @param value The value to compare.
-* @param other The other value to compare.
-* @returns Returns `true` if the values are equivalent, else `false`.
-*
-* @example
-* eq(1, 1); // true
-* eq(0, -0); // true
-* eq(NaN, NaN); // true
-* eq('a', Object('a')); // false
-*/
-function eq(value, other) {
-	return value === other || Number.isNaN(value) && Number.isNaN(other);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/assignValue.mjs
-const assignValue = (object, key, value) => {
-	const objValue = object[key];
-	if (!(Object.hasOwn(object, key) && eq(objValue, value)) || value === void 0 && !(key in object)) object[key] = value;
-};
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/_internal/isUnsafeToWriteProperty.mjs
-/**
-* Checks if a property key is unsafe to write to.
-*
-* Writing through `__proto__`, `constructor`, or `prototype` can reach
-* `Object.prototype` and pollute every object, so write paths like `set`,
-* `update`, and `zipObjectDeep` abort when a path segment matches one of
-* these keys, matching lodash's behavior.
-*
-* Read paths like `get` and `unset` use `isUnsafeProperty` instead, which
-* only blocks `__proto__`; lodash keeps reads of `constructor` and
-* `prototype` unrestricted.
-*
-* @param key - The property key to check
-* @returns `true` if the property is unsafe to write to, `false` otherwise
-* @internal
-*/
-function isUnsafeToWriteProperty(key) {
-	return key === "__proto__" || key === "constructor" || key === "prototype";
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/updateWith.mjs
-/**
-* Updates the value at the specified path of the given object using an updater function and a customizer.
-* If any part of the path does not exist, it will be created.
-*
-* @template T - The type of the object.
-* @template R - The type of the return value.
-* @param obj - The object to modify.
-* @param path - The path of the property to update.
-* @param updater - The function to produce the updated value.
-* @param customizer - The function to customize the update process.
-* @returns The modified object.
-*
-* @example
-* const object = { 'a': [{ 'b': { 'c': 3 } }] };
-* updateWith(object, 'a[0].b.c', (n) => n * n);
-* // => { 'a': [{ 'b': { 'c': 9 } }] }
-*/
-function updateWith(obj, path, updater, customizer) {
-	if (obj == null && !isObject$1(obj)) return obj;
-	let resolvedPath;
-	if (isKey(path, obj)) resolvedPath = [path];
-	else if (Array.isArray(path)) resolvedPath = path;
-	else resolvedPath = toPath(path);
-	const updateValue = updater(get(obj, resolvedPath));
-	let current = obj;
-	for (let i = 0; i < resolvedPath.length && current != null; i++) {
-		const key = toKey(resolvedPath[i]);
-		if (isUnsafeToWriteProperty(key)) return obj;
-		let newValue;
-		if (i === resolvedPath.length - 1) newValue = updateValue;
-		else {
-			const objValue = current[key];
-			const customizerResult = customizer?.(objValue, key, obj);
-			newValue = customizerResult !== void 0 ? customizerResult : isObject$1(objValue) ? objValue : isIndex(resolvedPath[i + 1]) ? [] : {};
-		}
-		assignValue(current, key, newValue);
-		current = current[key];
-	}
-	return obj;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/set.mjs
-/**
-* Sets the value at the specified path of the given object. If any part of the path does not exist, it will be created.
-*
-* @template T - The type of the object.
-* @param obj - The object to modify.
-* @param path - The path of the property to set.
-* @param value - The value to set.
-* @returns The modified object.
-*
-* @example
-* // Set a value in a nested object
-* const obj = { a: { b: { c: 3 } } };
-* set(obj, 'a.b.c', 4);
-* console.log(obj.a.b.c); // 4
-*
-* @example
-* // Set a value in an array
-* const arr = [1, 2, 3];
-* set(arr, 1, 4);
-* console.log(arr[1]); // 4
-*
-* @example
-* // Create non-existent path and set value
-* const obj = {};
-* set(obj, 'a.b.c', 4);
-* console.log(obj); // { a: { b: { c: 4 } } }
-*/
-function set(obj, path, value) {
-	return updateWith(obj, path, () => value, () => void 0);
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/get-config-token.util.js
-/**
-* @publicApi
-*/
-function getConfigToken(token) {
-	return `CONFIGURATION(${token.toString()})`;
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/get-default-parser.util.js
-var import_main$1 = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const fs$2 = __require("fs");
-	const path = __require("path");
-	const os = __require("os");
-	const crypto = __require("crypto");
-	const TIPS = [
-		"◈ encrypted .env [www.dotenvx.com]",
-		"◈ secrets for agents [www.dotenvx.com]",
-		"⌁ auth for agents [www.vestauth.com]",
-		"⌘ custom filepath { path: '/custom/path/.env' }",
-		"⌘ enable debugging { debug: true }",
-		"⌘ override existing { override: true }",
-		"⌘ suppress logs { quiet: true }",
-		"⌘ multiple files { path: ['.env.local', '.env'] }"
-	];
-	function _getRandomTip() {
-		return TIPS[Math.floor(Math.random() * TIPS.length)];
-	}
-	function parseBoolean(value) {
-		if (typeof value === "string") return ![
-			"false",
-			"0",
-			"no",
-			"off",
-			""
-		].includes(value.toLowerCase());
-		return Boolean(value);
-	}
-	function supportsAnsi() {
-		return process.stdout.isTTY;
-	}
-	function dim(text) {
-		return supportsAnsi() ? `\x1b[2m${text}\x1b[0m` : text;
-	}
-	const LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/gm;
-	function parse(src) {
-		const obj = {};
-		let lines = src.toString();
-		lines = lines.replace(/\r\n?/gm, "\n");
-		let match;
-		while ((match = LINE.exec(lines)) != null) {
-			const key = match[1];
-			let value = match[2] || "";
-			value = value.trim();
-			const maybeQuote = value[0];
-			value = value.replace(/^(['"`])([\s\S]*)\1$/gm, "$2");
-			if (maybeQuote === "\"") {
-				value = value.replace(/\\n/g, "\n");
-				value = value.replace(/\\r/g, "\r");
-			}
-			obj[key] = value;
-		}
-		return obj;
-	}
-	function _parseVault(options) {
-		options = options || {};
-		const vaultPath = _vaultPath(options);
-		options.path = vaultPath;
-		const result = DotenvModule.configDotenv(options);
-		if (!result.parsed) {
-			const err = /* @__PURE__ */ new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
-			err.code = "MISSING_DATA";
-			throw err;
-		}
-		const keys = _dotenvKey(options).split(",");
-		const length = keys.length;
-		let decrypted;
-		for (let i = 0; i < length; i++) try {
-			const attrs = _instructions(result, keys[i].trim());
-			decrypted = DotenvModule.decrypt(attrs.ciphertext, attrs.key);
-			break;
-		} catch (error) {
-			if (i + 1 >= length) throw error;
-		}
-		return DotenvModule.parse(decrypted);
-	}
-	function _warn(message) {
-		console.error(`⚠ ${message}`);
-	}
-	function _debug(message) {
-		console.log(`┆ ${message}`);
-	}
-	function _log(message) {
-		console.log(`◇ ${message}`);
-	}
-	function _dotenvKey(options) {
-		if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) return options.DOTENV_KEY;
-		if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) return process.env.DOTENV_KEY;
-		return "";
-	}
-	function _instructions(result, dotenvKey) {
-		let uri;
-		try {
-			uri = new URL(dotenvKey);
-		} catch (error) {
-			if (error.code === "ERR_INVALID_URL") {
-				const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development");
-				err.code = "INVALID_DOTENV_KEY";
-				throw err;
-			}
-			throw error;
-		}
-		const key = uri.password;
-		if (!key) {
-			const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: Missing key part");
-			err.code = "INVALID_DOTENV_KEY";
-			throw err;
-		}
-		const environment = uri.searchParams.get("environment");
-		if (!environment) {
-			const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: Missing environment part");
-			err.code = "INVALID_DOTENV_KEY";
-			throw err;
-		}
-		const environmentKey = `DOTENV_VAULT_${environment.toUpperCase()}`;
-		const ciphertext = result.parsed[environmentKey];
-		if (!ciphertext) {
-			const err = /* @__PURE__ */ new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
-			err.code = "NOT_FOUND_DOTENV_ENVIRONMENT";
-			throw err;
-		}
-		return {
-			ciphertext,
-			key
-		};
-	}
-	function _vaultPath(options) {
-		let possibleVaultPath = null;
-		if (options && options.path && options.path.length > 0) {
-			if (Array.isArray(options.path)) {
-				for (const filepath of options.path) if (fs$2.existsSync(filepath)) possibleVaultPath = filepath.endsWith(".vault") ? filepath : `${filepath}.vault`;
-			} else possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
-		} else possibleVaultPath = path.resolve(process.cwd(), ".env.vault");
-		if (fs$2.existsSync(possibleVaultPath)) return possibleVaultPath;
-		return null;
-	}
-	function _resolveHome(envPath) {
-		return envPath[0] === "~" ? path.join(os.homedir(), envPath.slice(1)) : envPath;
-	}
-	function _configVault(options) {
-		const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options && options.debug);
-		const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || options && options.quiet);
-		if (debug || !quiet) _log("loading env from encrypted .env.vault");
-		const parsed = DotenvModule._parseVault(options);
-		let processEnv = process.env;
-		if (options && options.processEnv != null) processEnv = options.processEnv;
-		DotenvModule.populate(processEnv, parsed, options);
-		return { parsed };
-	}
-	function configDotenv(options) {
-		const dotenvPath = path.resolve(process.cwd(), ".env");
-		let encoding = "utf8";
-		let processEnv = process.env;
-		if (options && options.processEnv != null) processEnv = options.processEnv;
-		let debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || options && options.debug);
-		let quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || options && options.quiet);
-		if (options && options.encoding) encoding = options.encoding;
-		else if (debug) _debug("no encoding is specified (UTF-8 is used by default)");
-		let optionPaths = [dotenvPath];
-		if (options && options.path) {
-			if (!Array.isArray(options.path)) optionPaths = [_resolveHome(options.path)];
-			else {
-				optionPaths = [];
-				for (const filepath of options.path) optionPaths.push(_resolveHome(filepath));
-			}
-		}
-		let lastError;
-		const parsedAll = {};
-		for (const path of optionPaths) try {
-			const parsed = DotenvModule.parse(fs$2.readFileSync(path, { encoding }));
-			DotenvModule.populate(parsedAll, parsed, options);
-		} catch (e) {
-			if (debug) _debug(`failed to load ${path} ${e.message}`);
-			lastError = e;
-		}
-		const populated = DotenvModule.populate(processEnv, parsedAll, options);
-		debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || debug);
-		quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || quiet);
-		if (debug || !quiet) {
-			const keysCount = Object.keys(populated).length;
-			const shortPaths = [];
-			for (const filePath of optionPaths) try {
-				const relative = path.relative(process.cwd(), filePath);
-				shortPaths.push(relative);
-			} catch (e) {
-				if (debug) _debug(`failed to load ${filePath} ${e.message}`);
-				lastError = e;
-			}
-			_log(`injected env (${keysCount}) from ${shortPaths.join(",")} ${dim(`// tip: ${_getRandomTip()}`)}`);
-		}
-		if (lastError) return {
-			parsed: parsedAll,
-			error: lastError
-		};
-		else return { parsed: parsedAll };
-	}
-	function config(options) {
-		if (_dotenvKey(options).length === 0) return DotenvModule.configDotenv(options);
-		const vaultPath = _vaultPath(options);
-		if (!vaultPath) {
-			_warn(`you set DOTENV_KEY but you are missing a .env.vault file at ${vaultPath}`);
-			return DotenvModule.configDotenv(options);
-		}
-		return DotenvModule._configVault(options);
-	}
-	function decrypt(encrypted, keyStr) {
-		const key = Buffer.from(keyStr.slice(-64), "hex");
-		let ciphertext = Buffer.from(encrypted, "base64");
-		const nonce = ciphertext.subarray(0, 12);
-		const authTag = ciphertext.subarray(-16);
-		ciphertext = ciphertext.subarray(12, -16);
-		try {
-			const aesgcm = crypto.createDecipheriv("aes-256-gcm", key, nonce);
-			aesgcm.setAuthTag(authTag);
-			return `${aesgcm.update(ciphertext)}${aesgcm.final()}`;
-		} catch (error) {
-			const isRange = error instanceof RangeError;
-			const invalidKeyLength = error.message === "Invalid key length";
-			const decryptionFailed = error.message === "Unsupported state or unable to authenticate data";
-			if (isRange || invalidKeyLength) {
-				const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: It must be 64 characters long (or more)");
-				err.code = "INVALID_DOTENV_KEY";
-				throw err;
-			} else if (decryptionFailed) {
-				const err = /* @__PURE__ */ new Error("DECRYPTION_FAILED: Please check your DOTENV_KEY");
-				err.code = "DECRYPTION_FAILED";
-				throw err;
-			} else throw error;
-		}
-	}
-	function populate(processEnv, parsed, options = {}) {
-		const debug = Boolean(options && options.debug);
-		const override = Boolean(options && options.override);
-		const populated = {};
-		if (typeof parsed !== "object") {
-			const err = /* @__PURE__ */ new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
-			err.code = "OBJECT_REQUIRED";
-			throw err;
-		}
-		for (const key of Object.keys(parsed)) if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
-			if (override === true) {
-				processEnv[key] = parsed[key];
-				populated[key] = parsed[key];
-			}
-			if (debug) {
-				if (override === true) _debug(`"${key}" is already defined and WAS overwritten`);
-				else _debug(`"${key}" is already defined and was NOT overwritten`);
-			}
-		} else {
-			processEnv[key] = parsed[key];
-			populated[key] = parsed[key];
-		}
-		return populated;
-	}
-	const DotenvModule = {
-		configDotenv,
-		_configVault,
-		_parseVault,
-		config,
-		decrypt,
-		parse,
-		populate
-	};
-	module.exports.configDotenv = DotenvModule.configDotenv;
-	module.exports._configVault = DotenvModule._configVault;
-	module.exports._parseVault = DotenvModule._parseVault;
-	module.exports.config = DotenvModule.config;
-	module.exports.decrypt = DotenvModule.decrypt;
-	module.exports.parse = DotenvModule.parse;
-	module.exports.populate = DotenvModule.populate;
-	module.exports = DotenvModule;
-})))(), 1);
-const getDefaultParser = () => import_main$1.parse;
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config.service.js
-var __decorate$2 = function(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = function(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = function(paramIndex, decorator) {
-	return function(target, key) {
-		decorator(target, key, paramIndex);
-	};
-};
-/**
-* @publicApi
-*/
-let ConfigService = class ConfigService {
-	set isCacheEnabled(value) {
-		this._isCacheEnabled = value;
-	}
-	get isCacheEnabled() {
-		return this._isCacheEnabled;
-	}
-	set skipProcessEnv(value) {
-		this._skipProcessEnv = value;
-	}
-	get skipProcessEnv() {
-		return this._skipProcessEnv;
-	}
-	constructor(internalConfig = {}) {
-		this.internalConfig = internalConfig;
-		this.cache = {};
-		this._changes$ = new Subject();
-		this._skipProcessEnv = false;
-		this._isCacheEnabled = false;
-		this.envFilePaths = [];
-		this.parser = getDefaultParser();
-	}
-	/**
-	* Returns a stream of configuration changes.
-	* Each event contains the attribute path, the old value and the new value.
-	*/
-	get changes$() {
-		return this._changes$.asObservable();
-	}
 	/**
-	* Get a configuration value (either custom configuration or process environment variable)
-	* based on property path (you can use dot notation to traverse nested object, e.g. "database.host").
-	* It returns a default value if the key does not exist.
-	* @param propertyPath
-	* @param defaultValueOrOptions
-	*/
-	get(propertyPath, defaultValueOrOptions, options) {
-		const internalValue = this.getFromInternalConfig(propertyPath);
-		if (!isUndefined(internalValue)) return internalValue;
-		const validatedEnvValue = this.getFromValidatedEnv(propertyPath);
-		if (!isUndefined(validatedEnvValue)) return validatedEnvValue;
-		const defaultValue = this.isGetOptionsObject(defaultValueOrOptions) && !options ? void 0 : defaultValueOrOptions;
-		if (!this._skipProcessEnv) {
-			const processEnvValue = this.getFromProcessEnv(propertyPath, defaultValue);
-			if (!isUndefined(processEnvValue)) return processEnvValue;
-		}
-		return defaultValue;
-	}
-	/**
-	* Get a configuration value (either custom configuration or process environment variable)
-	* based on property path (you can use dot notation to traverse nested object, e.g. "database.host").
-	* It returns a default value if the key does not exist.
-	* If the default value is undefined an exception will be thrown.
-	* @param propertyPath
-	* @param defaultValueOrOptions
-	*/
-	getOrThrow(propertyPath, defaultValueOrOptions, options) {
-		const value = this.get(propertyPath, defaultValueOrOptions, options);
-		if (isUndefined(value)) throw new TypeError(`Configuration key "${propertyPath.toString()}" does not exist`);
-		return value;
-	}
-	/**
-	* Sets a configuration value based on property path.
-	* @param propertyPath
-	* @param value
-	*/
-	set(propertyPath, value) {
-		const oldValue = this.get(propertyPath);
-		set(this.internalConfig, propertyPath, value);
-		if (typeof propertyPath === "string") {
-			process.env[propertyPath] = String(value);
-			this.updateInterpolatedEnv(propertyPath, String(value));
-		}
-		if (this.isCacheEnabled) this.setInCacheIfDefined(propertyPath, value);
-		this._changes$.next({
-			path: propertyPath,
-			oldValue,
-			newValue: value
-		});
-	}
-	/**
-	* Sets env file paths from `config.module.ts` to parse.
-	* @param paths
-	*/
-	setEnvFilePaths(paths) {
-		this.envFilePaths = paths;
-	}
-	/**
-	* Sets parser from `config.module.ts`.
-	* @param parser
-	*/
-	setParser(parser) {
-		this.parser = parser;
-	}
-	getFromCache(propertyPath, defaultValue) {
-		const cachedValue = get(this.cache, propertyPath);
-		return isUndefined(cachedValue) ? defaultValue : cachedValue;
-	}
-	getFromValidatedEnv(propertyPath) {
-		return get(this.internalConfig[VALIDATED_ENV_PROPNAME], propertyPath);
-	}
-	getFromProcessEnv(propertyPath, defaultValue) {
-		if (this.isCacheEnabled && has(this.cache, propertyPath)) {
-			const cachedValue = this.getFromCache(propertyPath, defaultValue);
-			return !isUndefined(cachedValue) ? cachedValue : defaultValue;
-		}
-		const processValue = get(process.env, propertyPath);
-		this.setInCacheIfDefined(propertyPath, processValue);
-		return processValue;
-	}
-	getFromInternalConfig(propertyPath) {
-		return get(this.internalConfig, propertyPath);
-	}
-	setInCacheIfDefined(propertyPath, value) {
-		if (typeof value === "undefined") return;
-		set(this.cache, propertyPath, value);
-	}
-	isGetOptionsObject(options) {
-		return options && options?.infer && Object.keys(options).length === 1;
-	}
-	updateInterpolatedEnv(propertyPath, value) {
-		let config = {};
-		for (const envFilePath of this.envFilePaths) if (fs.existsSync(envFilePath)) config = Object.assign(this.parser(fs.readFileSync(envFilePath)), config);
-		const regex = new RegExp(`\\$\\{?${propertyPath}\\}?`, "g");
-		for (const [k, v] of Object.entries(config)) if (regex.test(v)) process.env[k] = v.replace(regex, value);
-	}
-};
-ConfigService = __decorate$2([
-	Injectable(),
-	__param(0, Optional()),
-	__param(0, Inject(CONFIGURATION_TOKEN)),
-	__metadata("design:paramtypes", [Object])
-], ConfigService);
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config-host.module.js
-var __decorate$1 = function(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-/**
-* @publicApi
-*/
-let ConfigHostModule = class ConfigHostModule {};
-ConfigHostModule = __decorate$1([Global(), Module({
-	providers: [{
-		provide: CONFIGURATION_TOKEN,
-		useFactory: () => ({})
-	}, {
-		provide: CONFIGURATION_SERVICE_TOKEN,
-		useClass: ConfigService
-	}],
-	exports: [CONFIGURATION_TOKEN, CONFIGURATION_SERVICE_TOKEN]
-})], ConfigHostModule);
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/create-config-factory.util.js
-/**
-* @publicApi
-*/
-function createConfigProvider(factory) {
-	return {
-		provide: factory.KEY || getConfigToken(randomUUID()),
-		useFactory: factory,
-		inject: []
-	};
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/get-registration-token.util.js
-/**
-* @publicApi
-*/
-function getRegistrationToken(config) {
-	return config[PARTIAL_CONFIGURATION_KEY];
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/merge-configs.util.js
-/**
-* @publicApi
-*/
-function mergeConfigObject(host, partial, token) {
-	if (token) {
-		set(host, token, partial);
-		return partial;
-	}
-	Object.assign(host, partial);
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/validate-with-schema.util.js
-/**
-* Joi defaults to `allowUnknown: false` and `abortEarly: true`, which would
-* reject the unrelated variables that are always present in `process.env` and
-* report only the first failure. Previous versions of this package overrode
-* both, so they remain the defaults for Joi schemas unless the user opts out.
-*/
-const JOI_DEFAULT_LIBRARY_OPTIONS = {
-	abortEarly: false,
-	allowUnknown: true
-};
-/**
-* Validates config using a Standard Schema (e.g. Zod, Arktype).
-* @see https://standardschema.dev/
-*/
-async function validateWithStandardSchema(schema, config, options) {
-	const result = await schema["~standard"].validate(config, getLibraryOptions(schema, options));
-	if (result.issues) return {
-		error: new Error(formatIssues(result.issues)),
-		value: config
-	};
-	return { value: result.value };
-}
-function getLibraryOptions(schema, options) {
-	if (schema["~standard"].vendor !== "joi") return options;
-	return {
-		...options,
-		libraryOptions: {
-			...JOI_DEFAULT_LIBRARY_OPTIONS,
-			...options?.libraryOptions
-		}
-	};
-}
-function formatIssues(issues) {
-	return issues.map((issue) => {
-		const path = formatIssuePath(issue.path);
-		return path ? `${path}: ${issue.message}` : issue.message;
-	}).join("\n");
-}
-function formatIssuePath(path) {
-	return (path ?? []).map((segment) => typeof segment === "object" && segment !== null ? String(segment.key) : String(segment)).join(".");
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config.module.js
-var __decorate = function(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var ConfigModule_1;
-/**
-* @publicApi
-*/
-let ConfigModule = ConfigModule_1 = class ConfigModule {
-	/**
-	* This promise resolves when parser completes loading environment variables.
-	* When "ignoreEnvFile" is set to true, then it will resolve immediately after the
-	* "ConfigModule#forRoot" method is called.
+	* @param pdf The PDF bytes to modify
+	* @param options Watermark options (`text` or `image` is required)
+	* @returns Modified PDF with the watermark stamped on the selected pages
+	* @description Stamps a text or image watermark on an existing PDF. By default the mark is centered, rotated by 45° at 15% opacity on every page. Use `position: 'tile'` to repeat it across the page and `pages` to target specific pages (1-based). To watermark a PDF while generating it, pass the same options as `watermark` in the `PuppeteerParameters`.
+	*
+	* ```typescript
+	* const watermarked = await pdfService.addWatermark(pdf, {
+	*   text: 'CONFIDENTIAL',
+	*   color: '#ff0000',
+	*   opacity: 0.2,
+	* });
+	* ```
+	*
+	* Text uses the PDF standard fonts, which only support WinAnsi characters; use an `image` for anything else.
+	* @throws WatermarkException when the options are invalid or the PDF cannot be processed
 	*/
-	static get envVariablesLoaded() {
-		return this._envVariablesLoaded;
-	}
-	/**
-	* Loads environment variables based on the "ignoreEnvFile" flag and "envFilePath" value.
-	* Additionally, registers custom configurations globally.
-	* @param options
-	*/
-	static async forRoot(options = {}) {
-		const envFilePaths = Array.isArray(options.envFilePath) ? options.envFilePath : [options.envFilePath || resolve$1(process.cwd(), ".env")];
-		const parser = options.parser ?? getDefaultParser();
-		let validatedEnvConfig = void 0;
-		let config = options.ignoreEnvFile ? {} : this.loadEnvFile(envFilePaths, parser, options);
-		if (!options.ignoreEnvVars && options.validatePredefined !== false) config = options.override ? {
-			...process.env,
-			...config
-		} : {
-			...config,
-			...process.env
-		};
-		if (options.validate) {
-			const validatedConfig = options.validate(config);
-			validatedEnvConfig = validatedConfig;
-			this.assignVariablesToProcess(validatedConfig, options.override);
-		} else if (options.validationSchema) {
-			const { error, value: validatedConfig } = await validateWithStandardSchema(options.validationSchema, config, options.validationOptions);
-			if (error) throw new Error(`Config validation error: ${error.message}`);
-			validatedEnvConfig = {
-				...config,
-				...validatedConfig
-			};
-			this.assignVariablesToProcess(validatedEnvConfig, options.override);
-		} else this.assignVariablesToProcess(config, options.override);
-		const isConfigToLoad = options.load && options.load.length;
-		const providers = (await Promise.all(options.load || [])).map((factory) => createConfigProvider(factory)).filter((item) => item);
-		const configProviderTokens = providers.map((item) => item.provide);
-		const configServiceProvider = {
-			provide: ConfigService,
-			useFactory: (configService) => {
-				const untypedConfigService = configService;
-				if (options.cache) untypedConfigService.isCacheEnabled = true;
-				if (options.skipProcessEnv) untypedConfigService.skipProcessEnv = true;
-				configService.setEnvFilePaths(envFilePaths);
-				configService.setParser(parser);
-				return configService;
-			},
-			inject: [CONFIGURATION_SERVICE_TOKEN, ...configProviderTokens]
-		};
-		providers.push(configServiceProvider);
-		if (validatedEnvConfig) {
-			const validatedEnvConfigLoader = {
-				provide: VALIDATED_ENV_LOADER,
-				useFactory: (host) => {
-					host[VALIDATED_ENV_PROPNAME] = validatedEnvConfig;
-				},
-				inject: [CONFIGURATION_TOKEN]
-			};
-			providers.push(validatedEnvConfigLoader);
-		}
-		this.environmentVariablesLoadedSignal();
-		return {
-			module: ConfigModule_1,
-			global: options.isGlobal,
-			providers: isConfigToLoad ? [...providers, {
-				provide: CONFIGURATION_LOADER,
-				useFactory: (host, ...configurations) => {
-					configurations.forEach((item, index) => this.mergePartial(host, item, providers[index]));
-				},
-				inject: [CONFIGURATION_TOKEN, ...configProviderTokens]
-			}] : providers,
-			exports: [ConfigService, ...configProviderTokens]
-		};
-	}
-	/**
-	* Registers configuration object (partial registration).
-	* @param config
-	*/
-	static forFeature(config) {
-		const configProvider = createConfigProvider(config);
-		const serviceProvider = {
-			provide: ConfigService,
-			useFactory: (configService) => configService,
-			inject: [CONFIGURATION_SERVICE_TOKEN, configProvider.provide]
-		};
-		return {
-			module: ConfigModule_1,
-			providers: [
-				configProvider,
-				serviceProvider,
-				{
-					provide: CONFIGURATION_LOADER,
-					useFactory: (host, partialConfig) => {
-						this.mergePartial(host, partialConfig, configProvider);
-					},
-					inject: [CONFIGURATION_TOKEN, configProvider.provide]
-				}
-			],
-			exports: [ConfigService, configProvider.provide]
-		};
-	}
-	static loadEnvFile(envFilePaths, parser, options) {
-		let config = {};
-		for (const envFilePath of envFilePaths) if (fs$1.existsSync(envFilePath)) {
-			config = Object.assign(parser(fs$1.readFileSync(envFilePath)), config);
-			if (options.expandVariables) {
-				const expandOptions = typeof options.expandVariables === "object" ? options.expandVariables : {};
-				config = (0, import_main.expand)({
-					...expandOptions,
-					parsed: config
-				}).parsed || config;
-			}
-		}
-		return config;
-	}
-	static assignVariablesToProcess(config, override) {
-		if (!isObject(config)) return;
-		(override ? Object.keys(config) : Object.keys(config).filter((key) => !(key in process.env))).forEach((key) => {
-			const value = config[key];
-			if (typeof value === "string") process.env[key] = value;
-			else if (typeof value === "boolean" || typeof value === "number") process.env[key] = `${value}`;
-		});
-	}
-	static mergePartial(host, item, provider) {
-		const factoryRef = provider.useFactory;
-		mergeConfigObject(host, item, getRegistrationToken(factoryRef));
+	async addWatermark(pdf, options) {
+		return await addWatermark(pdf, options);
 	}
 };
-ConfigModule._envVariablesLoaded = new Promise((resolve) => ConfigModule_1.environmentVariablesLoadedSignal = resolve);
-ConfigModule = ConfigModule_1 = __decorate([Module({
-	imports: [ConfigHostModule],
-	providers: [{
-		provide: ConfigService,
-		useExisting: CONFIGURATION_SERVICE_TOKEN
-	}],
-	exports: [ConfigHostModule, ConfigService]
-})], ConfigModule);
+NestjsPdfService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [typeof PuppeteerService === "undefined" ? Object : PuppeteerService])], NestjsPdfService);
 //#endregion
 //#region src/puppeteer/puppeteer.module.ts
 var _PuppeteerModule;
 let PuppeteerModule = _PuppeteerModule = class PuppeteerModule {
-	browserService;
-	pdfParams;
+	#browserService;
+	#pdfParams;
 	constructor(browserService, pdfParams) {
-		this.browserService = browserService;
-		this.pdfParams = pdfParams;
+		this.#browserService = browserService;
+		this.#pdfParams = pdfParams;
 	}
 	async onModuleInit() {
-		if (!this.pdfParams.executablePath) await this.browserService.install(this.pdfParams.useLockedBrowser ?? false);
+		if (!this.#pdfParams.executablePath) await this.#browserService.install(this.#pdfParams.useLockedBrowser ?? false);
 	}
 	static forRoot(pdfParameters) {
-		const providers = [
-			{
-				provide: PDF_PARAMETERS,
-				useValue: pdfParameters
-			},
-			HandlebarsService,
-			MjmlService,
-			PugService,
-			EjsService,
-			NunjucksService,
-			EtaService,
-			MustacheService
-		];
 		return {
 			module: _PuppeteerModule,
-			imports: [ConfigModule.forRoot()],
-			providers,
+			providers: [
+				{
+					provide: PDF_PARAMETERS,
+					useValue: pdfParameters
+				},
+				HandlebarsService,
+				MjmlService,
+				PugService,
+				EjsService,
+				NunjucksService,
+				EtaService,
+				MustacheService
+			],
 			exports: [
 				PuppeteerService,
 				MjmlService,
@@ -2579,7 +1715,7 @@ let PuppeteerModule = _PuppeteerModule = class PuppeteerModule {
 		};
 		return {
 			module: _PuppeteerModule,
-			imports: [...options.imports ?? [], ConfigModule.forRoot()],
+			imports: options.imports ?? [],
 			providers: [
 				pdfParamsProvider,
 				PuppeteerService,
@@ -2604,7 +1740,7 @@ let PuppeteerModule = _PuppeteerModule = class PuppeteerModule {
 		};
 	}
 };
-PuppeteerModule = _PuppeteerModule = __decorate$3([
+PuppeteerModule = _PuppeteerModule = __decorate([
 	Module({
 		providers: [
 			PuppeteerService,
@@ -2650,8 +1786,8 @@ let NestjsPdfModule = _NestjsPdfModule = class NestjsPdfModule {
 		};
 	}
 };
-NestjsPdfModule = _NestjsPdfModule = __decorate$3([Module({})], NestjsPdfModule);
+NestjsPdfModule = _NestjsPdfModule = __decorate([Module({})], NestjsPdfModule);
 //#endregion
-export { EjsService, EtaService, HandlebarsService, MjmlService, MustacheService, NestjsPdfModule, NestjsPdfService, NunjucksService, PugService, PuppeteerModule, PuppeteerService, getRelativePathToValue };
+export { BrowserInstallationException, BrowserUnavailableException, EjsService, EngineNotAvailableException, EtaService, HandlebarsService, MjmlService, MustacheService, NestjsPdfErrorCode, NestjsPdfException, NestjsPdfModule, NestjsPdfService, NunjucksService, PdfGenerationException, PugService, PuppeteerModule, PuppeteerService, SignatureDependencyException, SignaturePlacementException, TemplateConfigurationException, TemplateRenderException, WatermarkException, getRelativePathToValue };
 
 //# sourceMappingURL=index.mjs.map