@shad0wz7/nestjs-pdf 3.1.0 → 3.2.0

package/dist/index.mjs

@@ -1,11 +1,13 @@
-import { createRequire } from "node:module";
-import { basename, extname, join, relative, resolve, sep } from "node:path";
-import { Global, Inject, Injectable, Logger, Module, Optional } from "@nestjs/common";
-import { PDFArray, PDFDict, PDFDocument, PDFName, PDFNumber, PDFString } from "pdf-lib";
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { Inject, Injectable, Logger, Module, Optional } from "@nestjs/common";
+import { PDFArray, PDFDict, PDFDocument, PDFName, PDFNumber, PDFString, StandardFonts, degrees, rgb } from "pdf-lib";
 import { deepmerge } from "deepmerge-ts";
+import { lookup } from "node:dns/promises";
 import { existsSync, promises, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
-import { Browser, BrowserPlatform, canDownload, detectBrowserPlatform, getInstalledBrowsers, install, resolveBuildId } from "@puppeteer/browsers";
-import { launch } from "puppeteer";
+import { BlockList, isIP } from "node:net";
+import { fileURLToPath } from "node:url";
+import { TargetType, launch } from "puppeteer";
+import { Browser as Browser$1, BrowserPlatform, canDownload, detectBrowserPlatform, getInstalledBrowsers, install, resolveBuildId } from "@puppeteer/browsers";
 import ejs from "ejs";
 import { Eta } from "eta";
 import Handlebars from "handlebars";
@@ -13,36 +15,6 @@ import mjml from "mjml";
 import mustache from "mustache";
 import nunjucks from "nunjucks";
 import pug from "pug";
-import { isObject, isUndefined } from "@nestjs/common/utils/shared.utils.js";
-import * as fs$1 from "fs";
-import fs from "fs";
-import { resolve as resolve$1 } from "path";
-import { Subject } from "rxjs";
-import { randomUUID } from "crypto";
-//#region \0rolldown/runtime.js
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
-//#endregion
 //#region src/exceptions/nestjs-pdf.exception.ts
 let NestjsPdfErrorCode = /* @__PURE__ */ function(NestjsPdfErrorCode) {
 	NestjsPdfErrorCode["ENGINE_NOT_AVAILABLE"] = "ENGINE_NOT_AVAILABLE";
@@ -53,6 +25,7 @@ let NestjsPdfErrorCode = /* @__PURE__ */ function(NestjsPdfErrorCode) {
 	NestjsPdfErrorCode["PDF_GENERATION_ERROR"] = "PDF_GENERATION_ERROR";
 	NestjsPdfErrorCode["SIGNATURE_DEPENDENCY_ERROR"] = "SIGNATURE_DEPENDENCY_ERROR";
 	NestjsPdfErrorCode["SIGNATURE_PLACEMENT_ERROR"] = "SIGNATURE_PLACEMENT_ERROR";
+	NestjsPdfErrorCode["WATERMARK_ERROR"] = "WATERMARK_ERROR";
 	return NestjsPdfErrorCode;
 }({});
 var NestjsPdfException = class extends Error {
@@ -110,6 +83,11 @@ var TemplateRenderException = class extends NestjsPdfException {
 	}
 };
 //#endregion
+//#region src/exceptions/watermark.exception.ts
+var WatermarkException = class extends NestjsPdfException {
+	code = "WATERMARK_ERROR";
+};
+//#endregion
 //#region src/helpers/getRelativePath.helper.ts
 /**
 * Get the relative path to a value from the module directory.
@@ -269,6 +247,150 @@ async function addSignatureFieldUsingAnchor(pdf, fieldName = "SignatureDebtor",
 	return await pdfDoc.save();
 }
 //#endregion
+//#region src/helpers/watermark.helper.ts
+const DEFAULT_OPACITY = .15;
+const DEFAULT_ROTATION = 45;
+const DEFAULT_FONT_SIZE = 60;
+const DEFAULT_FONT = "HelveticaBold";
+const DEFAULT_COLOR = "#808080";
+const DEFAULT_TILE_SPACING = 100;
+function parseHexColor(color) {
+	const match = /^#([\da-f]{3}|[\da-f]{6})$/i.exec(color);
+	if (!match) throw new WatermarkException(`Invalid watermark color "${color}", expected #rgb or #rrggbb`);
+	const hex = match[1].length === 3 ? [...match[1]].map((c) => c + c).join("") : match[1];
+	const channel = (i) => Number.parseInt(hex.slice(i, i + 2), 16) / 255;
+	return rgb(channel(0), channel(2), channel(4));
+}
+function embedImage(pdfDoc, bytes) {
+	const isPng = bytes[0] === 137 && bytes[1] === 80 && bytes[2] === 78;
+	const isJpeg = bytes[0] === 255 && bytes[1] === 216;
+	if (isPng) return pdfDoc.embedPng(bytes);
+	if (isJpeg) return pdfDoc.embedJpg(bytes);
+	throw new WatermarkException("Watermark image must be a PNG or JPEG");
+}
+function validate(options) {
+	const { text, image, opacity, fontSize, imageWidth, tileSpacing } = options;
+	if (!text && !image) throw new WatermarkException("A watermark requires at least a `text` or an `image`");
+	if (opacity !== void 0 && !(opacity >= 0 && opacity <= 1)) throw new WatermarkException("Watermark `opacity` must be between 0 and 1");
+	if (fontSize !== void 0 && !(fontSize > 0)) throw new WatermarkException("Watermark `fontSize` must be greater than 0");
+	if (imageWidth !== void 0 && !(imageWidth > 0)) throw new WatermarkException("Watermark `imageWidth` must be greater than 0");
+	if (tileSpacing !== void 0 && !(tileSpacing >= 0)) throw new WatermarkException("Watermark `tileSpacing` must be at least 0");
+}
+function resolvePageIndexes(pages, total) {
+	if (!pages) return Array.from({ length: total }, (_, i) => i);
+	for (const page of pages) if (!Number.isInteger(page) || page < 1 || page > total) throw new WatermarkException(`Watermark page ${page} is out of range (the PDF has ${total} page(s))`);
+	return [...new Set(pages)].map((page) => page - 1);
+}
+/**
+* Centers of the marks for one page, in page coordinates. Tiles follow the
+* rotated axes so rotated marks never overlap each other.
+*/
+function markCenters(pageWidth, pageHeight, mark, options) {
+	const cx = pageWidth / 2;
+	const cy = pageHeight / 2;
+	if (options.position === "center") return [{
+		x: cx,
+		y: cy
+	}];
+	const theta = options.rotation * Math.PI / 180;
+	const cos = Math.cos(theta);
+	const sin = Math.sin(theta);
+	const stepX = mark.width + options.spacing;
+	const stepY = mark.height + options.spacing;
+	const reach = Math.hypot(mark.width, mark.height) / 2;
+	const n = Math.ceil((Math.hypot(pageWidth, pageHeight) / 2 + reach) / Math.min(stepX, stepY));
+	const centers = [];
+	for (let i = -n; i <= n; i++) for (let j = -n; j <= n; j++) {
+		const x = cx + i * stepX * cos - j * stepY * sin;
+		const y = cy + i * stepX * sin + j * stepY * cos;
+		if (x >= -reach && x <= pageWidth + reach && y >= -reach && y <= pageHeight + reach) centers.push({
+			x,
+			y
+		});
+	}
+	return centers;
+}
+async function buildMark(pdfDoc, options, pageWidth) {
+	const opacity = options.opacity ?? DEFAULT_OPACITY;
+	const rotate = degrees(options.rotation ?? DEFAULT_ROTATION);
+	if (options.image) {
+		const image = await embedImage(pdfDoc, new Uint8Array(options.image));
+		const width = options.imageWidth ?? pageWidth / 2;
+		const height = image.height / image.width * width;
+		return {
+			width,
+			height,
+			draw: (page, x, y) => page.drawImage(image, {
+				x,
+				y,
+				width,
+				height,
+				opacity,
+				rotate
+			})
+		};
+	}
+	const font = await pdfDoc.embedFont(StandardFonts[options.font ?? DEFAULT_FONT]);
+	const size = options.fontSize ?? DEFAULT_FONT_SIZE;
+	const text = options.text;
+	const color = parseHexColor(options.color ?? DEFAULT_COLOR);
+	let width;
+	try {
+		width = font.widthOfTextAtSize(text, size);
+	} catch (error) {
+		throw new WatermarkException(`Watermark text cannot be rendered with the ${options.font ?? DEFAULT_FONT} font (only WinAnsi characters are supported)`, { cause: error });
+	}
+	return {
+		width,
+		height: font.heightAtSize(size, { descender: false }),
+		draw: (page, x, y) => page.drawText(text, {
+			x,
+			y,
+			size,
+			font,
+			color,
+			opacity,
+			rotate
+		})
+	};
+}
+/**
+* Stamps a text or image watermark on the pages of an existing PDF.
+*/
+async function addWatermark(pdf, options) {
+	validate(options);
+	try {
+		const pdfDoc = await PDFDocument.load(new Uint8Array(pdf));
+		const pages = pdfDoc.getPages();
+		const indexes = resolvePageIndexes(options.pages, pages.length);
+		const position = options.position ?? "center";
+		const rotation = options.rotation ?? DEFAULT_ROTATION;
+		const spacing = options.tileSpacing ?? DEFAULT_TILE_SPACING;
+		const theta = rotation * Math.PI / 180;
+		const cos = Math.cos(theta);
+		const sin = Math.sin(theta);
+		const marks = /* @__PURE__ */ new Map();
+		for (const index of indexes) {
+			const page = pages[index];
+			const { width: pageWidth, height: pageHeight } = page.getSize();
+			let mark = marks.get(pageWidth);
+			if (!mark) {
+				mark = await buildMark(pdfDoc, options, pageWidth);
+				marks.set(pageWidth, mark);
+			}
+			for (const center of markCenters(pageWidth, pageHeight, mark, {
+				position,
+				rotation,
+				spacing
+			})) mark.draw(page, center.x - (mark.width / 2 * cos - mark.height / 2 * sin), center.y - (mark.width / 2 * sin + mark.height / 2 * cos));
+		}
+		return await pdfDoc.save();
+	} catch (error) {
+		if (error instanceof WatermarkException) throw error;
+		throw new WatermarkException(`Failed to add watermark: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+	}
+}
+//#endregion
 //#region node_modules/.pnpm/yocto-queue@1.2.2/node_modules/yocto-queue/index.js
 var Node = class {
 	value;
@@ -402,6 +524,154 @@ function mergePuppeteerParameters(defaults, overrides) {
 	return deepmerge(defaults, overrides);
 }
 //#endregion
+//#region src/helpers/request-guard.helper.ts
+const blockedRanges = new BlockList();
+for (const [address, prefix] of [
+	["0.0.0.0", 8],
+	["10.0.0.0", 8],
+	["100.64.0.0", 10],
+	["127.0.0.0", 8],
+	["169.254.0.0", 16],
+	["172.16.0.0", 12],
+	["192.0.0.0", 24],
+	["192.168.0.0", 16],
+	["198.18.0.0", 15],
+	["224.0.0.0", 4],
+	["240.0.0.0", 4]
+]) blockedRanges.addSubnet(address, prefix, "ipv4");
+for (const [address, prefix] of [
+	["::", 128],
+	["::1", 128],
+	["64:ff9b::", 96],
+	["fc00::", 7],
+	["fe80::", 10],
+	["ff00::", 8]
+]) blockedRanges.addSubnet(address, prefix, "ipv6");
+const IPV4_MAPPED_IPV6 = /^::ffff:([\da-f]{1,4}):([\da-f]{1,4})$/i;
+/** True for addresses that must not be reachable from a rendered document. */
+function isPrivateAddress(address) {
+	const family = isIP(address);
+	if (family === 4) return blockedRanges.check(address, "ipv4");
+	if (family === 6) {
+		const mapped = IPV4_MAPPED_IPV6.exec(address);
+		if (mapped) {
+			const high = Number.parseInt(mapped[1], 16);
+			const low = Number.parseInt(mapped[2], 16);
+			return isPrivateAddress([
+				high >> 8,
+				high & 255,
+				low >> 8,
+				low & 255
+			].join("."));
+		}
+		return blockedRanges.check(address, "ipv6");
+	}
+	return true;
+}
+function hostMatches(hostname, pattern) {
+	const host = hostname.toLowerCase();
+	const rule = pattern.toLowerCase();
+	if (rule.startsWith("*.")) return host.endsWith(rule.slice(1));
+	return host === rule;
+}
+function isLocalhostName(hostname) {
+	return hostname === "localhost" || hostname.endsWith(".localhost");
+}
+async function resolvesToPrivateAddress(hostname) {
+	const host = hostname.replace(/^\[|\]$/g, "");
+	if (isIP(host)) return isPrivateAddress(host);
+	if (isLocalhostName(host)) return true;
+	try {
+		return (await lookup(host, {
+			all: true,
+			verbatim: true
+		})).some(({ address }) => isPrivateAddress(address));
+	} catch {
+		return true;
+	}
+}
+async function isFileAllowed(url, roots) {
+	if (roots.length === 0 || url.hostname !== "" && url.hostname !== "localhost") return false;
+	let path;
+	try {
+		path = fileURLToPath(url);
+	} catch {
+		return false;
+	}
+	const real = async (candidate) => {
+		const missing = [];
+		let current = resolve(candidate);
+		for (;;) try {
+			return join(await promises.realpath(current), ...missing);
+		} catch {
+			const parent = dirname(current);
+			if (parent === current) return resolve(candidate);
+			missing.unshift(basename(current));
+			current = parent;
+		}
+	};
+	const target = await real(path);
+	for (const root of roots) {
+		const rel = relative(await real(root), target);
+		if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel)) return true;
+	}
+	return false;
+}
+/** Decides whether the browser may fetch `rawUrl`. */
+async function isRequestAllowed(rawUrl, options) {
+	let url;
+	try {
+		url = new URL(rawUrl);
+	} catch {
+		return false;
+	}
+	switch (url.protocol) {
+		case "about:":
+		case "data:":
+		case "blob:": return true;
+		case "file:": return isFileAllowed(url, options.allowedFileRoots ?? []);
+		case "http:":
+		case "https:":
+			if (options.allowedHosts) return options.allowedHosts.some((pattern) => hostMatches(url.hostname, pattern));
+			if (options.blockPrivateNetworks === false) return true;
+			return !await resolvesToPrivateAddress(url.hostname);
+		default: return false;
+	}
+}
+/** Logs the origin and path only: query strings may carry secrets. */
+function describe(rawUrl) {
+	try {
+		const url = new URL(rawUrl);
+		return `${url.origin === "null" ? `${url.protocol}//` : url.origin}${url.pathname}`;
+	} catch {
+		return "<invalid url>";
+	}
+}
+/**
+* Filters every request the page (and its frames) makes, redirects included,
+* and closes the pop-ups a script could open to escape the filter.
+*/
+async function installRequestGuard(context, page, options) {
+	context.on("targetcreated", (target) => {
+		if (target.type() === TargetType.PAGE && target.opener()) target.page().then((popup) => popup?.close()).catch(() => void 0);
+	});
+	if (options.javascriptEnabled === false) await page.setJavaScriptEnabled(false);
+	await page.setRequestInterception(true);
+	page.on("request", (request) => {
+		(async () => {
+			if (request.isInterceptResolutionHandled()) return;
+			const url = request.url();
+			const allowed = await isRequestAllowed(url, options).catch(() => false);
+			if (request.isInterceptResolutionHandled()) return;
+			if (allowed) await request.continue();
+			else {
+				Logger.warn(`Blocked request to ${describe(url)}`, "NestJsPdf");
+				await request.abort("blockedbyclient");
+			}
+		})().catch(() => void 0);
+	});
+}
+//#endregion
 //#region src/helpers/tokens.ts
 const PDF_PARAMETERS = "PDF_PARAMETERS";
 //#endregion
@@ -418,7 +688,7 @@ function __decorateParam(paramIndex, decorator) {
 }
 //#endregion
 //#region \0@oxc-project+runtime@0.149.0/helpers/esm/decorate.js
-function __decorate$3(decorators, target, key, desc) {
+function __decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
 	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
 	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
@@ -592,7 +862,7 @@ let BrowserService = class BrowserService {
 	}
 	#loadBrowser() {
 		let browser;
-		if (this.#options?.browser === void 0) browser = Browser.CHROMIUM;
+		if (this.#options?.browser === void 0) browser = Browser$1.CHROMIUM;
 		else browser = this.#options.browser;
 		this.#browser = browser;
 	}
@@ -602,7 +872,7 @@ let BrowserService = class BrowserService {
 	#loadBrowserTag() {
 		let versionTag;
 		if (this.#options?.browserTag === void 0) {
-			if (this.#browser === Browser.CHROMIUM) versionTag = "latest";
+			if (this.#browser === Browser$1.CHROMIUM) versionTag = "latest";
 			else versionTag = "stable";
 		} else versionTag = this.#options.browserTag;
 		this.#browserTag = versionTag;
@@ -658,7 +928,8 @@ let BrowserService = class BrowserService {
 		const browser = await launch({
 			executablePath,
 			headless,
-			args
+			args,
+			ignoreDefaultArgs: ["--disable-popup-blocking"]
 		});
 		browser.on("disconnected", () => {
 			Logger.warn("Puppeteer browser disconnected");
@@ -685,7 +956,7 @@ let BrowserService = class BrowserService {
 		return null;
 	}
 };
-BrowserService = __decorate$3([
+BrowserService = __decorate([
 	Injectable(),
 	__decorateParam(0, Inject("PDF_PARAMETERS")),
 	__decorateMetadata("design:paramtypes", [Object])
@@ -714,7 +985,7 @@ let EjsService = class EjsService {
 		}
 	}
 };
-EjsService = __decorate$3([Injectable()], EjsService);
+EjsService = __decorate([Injectable()], EjsService);
 //#endregion
 //#region src/puppeteer/engines/eta/eta.service.ts
 let EtaService = class EtaService {
@@ -783,7 +1054,7 @@ let EtaService = class EtaService {
 		return this.#templateCache.size;
 	}
 };
-EtaService = __decorate$3([Injectable(), __decorateMetadata("design:paramtypes", [])], EtaService);
+EtaService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [])], EtaService);
 //#endregion
 //#region src/puppeteer/engines/handlebars/handlebars.service.ts
 let HandlebarsService = class HandlebarsService {
@@ -835,7 +1106,7 @@ let HandlebarsService = class HandlebarsService {
 		}
 	}
 };
-HandlebarsService = __decorate$3([Injectable()], HandlebarsService);
+HandlebarsService = __decorate([Injectable()], HandlebarsService);
 //#endregion
 //#region src/puppeteer/engines/mjml/mjml.service.ts
 let MjmlService = class MjmlService {
@@ -857,7 +1128,7 @@ let MjmlService = class MjmlService {
 		return await this.render(template, options);
 	}
 };
-MjmlService = __decorate$3([Injectable()], MjmlService);
+MjmlService = __decorate([Injectable()], MjmlService);
 //#endregion
 //#region src/puppeteer/engines/mustache/mustache.service.ts
 let MustacheService = class MustacheService {
@@ -915,7 +1186,7 @@ let MustacheService = class MustacheService {
 		return this.#templateCache.size;
 	}
 };
-MustacheService = __decorate$3([Injectable()], MustacheService);
+MustacheService = __decorate([Injectable()], MustacheService);
 //#endregion
 //#region src/puppeteer/engines/nunjucks/nunjucks.service.ts
 let NunjucksService = class NunjucksService {
@@ -961,7 +1232,7 @@ let NunjucksService = class NunjucksService {
 		}
 	}
 };
-NunjucksService = __decorate$3([Injectable(), __decorateMetadata("design:paramtypes", [])], NunjucksService);
+NunjucksService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [])], NunjucksService);
 //#endregion
 //#region src/puppeteer/engines/pug/pug.service.ts
 let PugService = class PugService {
@@ -981,7 +1252,7 @@ let PugService = class PugService {
 		}
 	}
 };
-PugService = __decorate$3([Injectable()], PugService);
+PugService = __decorate([Injectable()], PugService);
 //#endregion
 //#region src/puppeteer/libs/requireService.utils.ts
 function requireService(service, name) {
@@ -1013,7 +1284,12 @@ let PuppeteerService = class PuppeteerService {
 	}
 	#limit = pLimit(3);
 	async generatePdfFromHtml(html, options) {
-		return this.#limit(async () => {
+		const signal = options?.signal ?? this.#options.signal;
+		signal?.throwIfAborted();
+		let started = false;
+		const job = this.#limit(async () => {
+			signal?.throwIfAborted();
+			started = true;
 			const mergePuppeteerOptions = mergePuppeteerParameters(this.#options, options);
 			if (mergePuppeteerOptions.chromiumRevision !== void 0) Logger.warn("Using `chromiumRevision` is no longer supported since the puppeteer update.");
 			const headless = mergePuppeteerOptions.headless ?? true;
@@ -1035,7 +1311,6 @@ let PuppeteerService = class PuppeteerService {
 				"--disable-ipc-flooding-protection",
 				"--disable-notifications",
 				"--disable-offer-store-unmasked-wallet-cards",
-				"--disable-popup-blocking",
 				"--disable-print-preview",
 				"--disable-prompt-on-repost",
 				"--disable-renderer-backgrounding",
@@ -1058,9 +1333,18 @@ let PuppeteerService = class PuppeteerService {
 			];
 			this.#browserService.markJobStarted();
 			let context = null;
+			let closing;
+			const onAbort = () => {
+				if (!context) return;
+				closing = context.close();
+				closing.catch(() => void 0);
+			};
+			signal?.addEventListener("abort", onAbort, { once: true });
 			try {
 				context = await this.#browserService.createContext(args, headless, executablePath);
+				signal?.throwIfAborted();
 				const page = await context.newPage();
+				if (mergePuppeteerOptions.security) await installRequestGuard(context, page, mergePuppeteerOptions.security);
 				const pdfOptions = mergePuppeteerOptions.pdfOptions ?? { format: "A4" };
 				await page.setContent(html, { waitUntil: "domcontentloaded" });
 				await page.emulateMediaType("screen");
@@ -1070,20 +1354,38 @@ let PuppeteerService = class PuppeteerService {
 				});
 				/* v8 ignore next */
 				await page.evaluate(() => document.fonts.ready);
-				return await page.pdf(pdfOptions);
+				const pdf = await page.pdf(pdfOptions);
+				signal?.throwIfAborted();
+				return mergePuppeteerOptions.watermark ? await addWatermark(pdf, mergePuppeteerOptions.watermark) : pdf;
 			} catch (e) {
+				if (signal?.aborted) throw signal.reason;
 				Logger.error(e);
 				if (e instanceof NestjsPdfException) throw e;
 				throw new PdfGenerationException(`PDF generation failed: ${String(e)}`, { cause: e });
 			} finally {
+				signal?.removeEventListener("abort", onAbort);
 				if (context) try {
-					await context.close();
+					if (closing) await closing;
+					else await context.close();
 				} catch (error) {
 					Logger.error(error);
 				}
 				await this.#browserService.markJobFinished();
 			}
 		});
+		if (!signal) return job;
+		let onQueuedAbort;
+		const abortedWhileQueued = new Promise((_, reject) => {
+			onQueuedAbort = () => {
+				if (!started) reject(signal.reason);
+			};
+			signal.addEventListener("abort", onQueuedAbort, { once: true });
+		});
+		try {
+			return await Promise.race([job, abortedWhileQueued]);
+		} finally {
+			signal.removeEventListener("abort", onQueuedAbort);
+		}
 	}
 	async generatePdfFromTemplateHbsString(template, parameters = {}, options) {
 		const html = requireService(this.#hbsService, "Handlebars").render(template, parameters, options?.hbsOptions ?? this.#options.hbsOptions);
@@ -1142,7 +1444,7 @@ let PuppeteerService = class PuppeteerService {
 		return this.generatePdfFromHtml(html, options);
 	}
 };
-PuppeteerService = __decorate$3([
+PuppeteerService = __decorate([
 	Injectable(),
 	__decorateParam(1, Inject(PDF_PARAMETERS)),
 	__decorateParam(2, Optional()),
@@ -1343,1276 +1645,28 @@ let NestjsPdfService = class NestjsPdfService {
 	async addSignatureFieldSignatureDebtorRaw(pdf, fieldName = "SignatureDebtor", anchorText = "__SIG_DEBTOR_ANCHOR__") {
 		return await addSignatureFieldUsingAnchor(pdf, fieldName, anchorText);
 	}
-};
-NestjsPdfService = __decorate$3([Injectable(), __decorateMetadata("design:paramtypes", [typeof PuppeteerService === "undefined" ? Object : PuppeteerService])], NestjsPdfService);
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config.constants.js
-var import_main = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
-	function _resolveEscapeSequences(value) {
-		return value.replace(/\\\$/g, "$");
-	}
-	function expandValue(value, processEnv, runningParsed) {
-		const env = {
-			...runningParsed,
-			...processEnv
-		};
-		const regex = /(?<!\\)\${([^{}]+)}|(?<!\\)\$([A-Za-z_][A-Za-z0-9_]*)/g;
-		let result = value;
-		let match;
-		const seen = /* @__PURE__ */ new Set();
-		while ((match = regex.exec(result)) !== null) {
-			seen.add(result);
-			const [template, bracedExpression, unbracedExpression] = match;
-			const expression = bracedExpression || unbracedExpression;
-			const opMatch = expression.match(/(:\+|\+|:-|-)/);
-			const splitter = opMatch ? opMatch[0] : null;
-			const r = expression.split(splitter);
-			let defaultValue;
-			let value;
-			const key = r.shift();
-			if ([":+", "+"].includes(splitter)) {
-				defaultValue = env[key] ? r.join(splitter) : "";
-				value = null;
-			} else {
-				defaultValue = r.join(splitter);
-				value = env[key];
-			}
-			if (value) {
-				if (seen.has(value)) result = result.replace(template, defaultValue);
-				else result = result.replace(template, value);
-			} else result = result.replace(template, defaultValue);
-			if (result === runningParsed[key]) break;
-			regex.lastIndex = 0;
-		}
-		return result;
-	}
-	function expand(options) {
-		const runningParsed = {};
-		let processEnv = process.env;
-		if (options && options.processEnv != null) processEnv = options.processEnv;
-		for (const key in options.parsed) {
-			let value = options.parsed[key];
-			if (processEnv[key] && processEnv[key] !== value) value = processEnv[key];
-			else value = expandValue(value, processEnv, runningParsed);
-			options.parsed[key] = _resolveEscapeSequences(value);
-			runningParsed[key] = _resolveEscapeSequences(value);
-		}
-		for (const processKey in options.parsed) processEnv[processKey] = options.parsed[processKey];
-		return options;
-	}
-	module.exports.expand = expand;
-})))();
-/**
-* Injection tokens
-*/
-const CONFIGURATION_SERVICE_TOKEN = Symbol("CONFIG_SERVICE");
-const CONFIGURATION_TOKEN = "CONFIGURATION_TOKEN";
-const CONFIGURATION_LOADER = "CONFIGURATION_LOADER";
-const VALIDATED_ENV_LOADER = "VALIDATED_ENV_LOADER";
-const PARTIAL_CONFIGURATION_KEY = "PARTIAL_CONFIGURATION_KEY";
-const VALIDATED_ENV_PROPNAME = "_PROCESS_ENV_VALIDATED";
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/_internal/isUnsafeProperty.mjs
-/**
-* Checks if a property key is unsafe to access or copy directly.
-*
-* This function is used in functions like `get`, `unset`, and `merge` to prevent
-* prototype pollution attacks by identifying `__proto__`, which modifies the object's
-* prototype chain. `constructor` and `prototype` stay accessible here because lodash
-* keeps reads of them unrestricted; write paths use `isUnsafeToWriteProperty` instead,
-* which also blocks those keys.
-*
-* @param key - The property key to check
-* @returns `true` if the property is unsafe to access directly, `false` otherwise
-* @internal
-*/
-function isUnsafeProperty(key) {
-	return key === "__proto__";
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/isDeepKey.mjs
-/** Matches any deep property path. Examples: `a.b`, `a[0]`, `a["b"]` */
-const regexIsDeepProp$1 = /\.|(\[(?:[^[\]]*|(["'])(?:(?!\2)[^\\]|\\.)*?\2)\])/;
-/**
-* Checks if a given key is a deep key.
-*
-* A deep key is a string that contains a dot (.) or square brackets with a property accessor.
-*
-* @param {PropertyKey} key - The key to check.
-* @returns {boolean} - Returns true if the key is a deep key, otherwise false.
-*
-* Examples:
-*
-* isDeepKey('a.b') // true
-* isDeepKey('a[b]') // true
-* isDeepKey('a') // false
-* isDeepKey(123) // false
-* isDeepKey('a.b.c') // true
-* isDeepKey('a[b][c]') // true
-* isDeepKey('a.') // false
-* isDeepKey('.a') // false
-* isDeepKey('a[b') // false
-* isDeepKey('a]b]') // false
-* isDeepKey('a][b') // false
-* isDeepKey('') // false
-* isDeepKey('a[0]') // true
-*
-*/
-function isDeepKey(key) {
-	switch (typeof key) {
-		case "number":
-		case "symbol": return false;
-		case "string":
-			if (key === "" || key.startsWith(".") || key.endsWith(".")) return false;
-			return regexIsDeepProp$1.test(key);
-		default: return false;
-	}
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/toKey.mjs
-/**
-* Converts `value` to a string key if it's not a string or symbol.
-*
-* @private
-* @param {unknown} value The value to inspect.
-* @returns {string|symbol} Returns the key.
-*/
-function toKey(value) {
-	if (typeof value === "string" || typeof value === "symbol") return value;
-	if (Object.is(value?.valueOf?.(), -0)) return "-0";
-	return String(value);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/util/toString.mjs
-/**
-* Converts `value` to a string.
-*
-* An empty string is returned for `null` and `undefined` values.
-* The sign of `-0` is preserved.
-*
-* @param value - The value to convert.
-* @returns Returns the converted string.
-*
-* @example
-* toString(null) // returns ''
-* toString(undefined) // returns ''
-* toString(-0) // returns '-0'
-* toString([1, 2, -0]) // returns '1,2,-0'
-* toString([Symbol('a'), Symbol('b')]) // returns 'Symbol(a),Symbol(b)'
-*/
-function toString(value) {
-	if (value == null) return "";
-	return baseToString(value);
-}
-function baseToString(value) {
-	if (typeof value === "string") return value;
-	if (Array.isArray(value)) return value.map(baseToString).join(",");
-	const result = String(value);
-	if (result === "0" && Object.is(Number(value), -0)) return "-0";
-	return result;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/util/toPath.mjs
-/**
-* Converts a deep key string into an array of path segments.
-*
-* This function takes a string representing a deep key (e.g., 'a.b.c' or 'a[b][c]') and breaks it down into an array of strings, each representing a segment of the path.
-*
-* @param deepKey - The deep key string to convert.
-* @returns An array of strings, each representing a segment of the path.
-*
-* Examples:
-*
-* toPath('a.b.c') // Returns ['a', 'b', 'c']
-* toPath('a[b][c]') // Returns ['a', 'b', 'c']
-* toPath('.a.b.c') // Returns ['', 'a', 'b', 'c']
-* toPath('a["b.c"].d') // Returns ['a', 'b.c', 'd']
-* toPath('') // Returns []
-* toPath('.a[b].c.d[e]["f.g"].h') // Returns ['', 'a', 'b', 'c', 'd', 'e', 'f.g', 'h']
-*/
-function toPath(deepKey) {
-	if (Array.isArray(deepKey)) return deepKey.map(toKey);
-	if (typeof deepKey === "symbol") return [deepKey];
-	deepKey = toString(deepKey);
-	const result = [];
-	const length = deepKey.length;
-	if (length === 0) return result;
-	let index = 0;
-	let key = "";
-	let quoteChar = "";
-	let bracket = false;
-	let bracketHadQuote = false;
-	const bracketNumberRegex = /^-?\d+(?:\.\d+)?$/;
-	if (deepKey.charCodeAt(0) === 46) result.push("");
-	while (index < length) {
-		const char = deepKey[index];
-		if (quoteChar) if (char === "\\" && index + 1 < length) {
-			index++;
-			key += deepKey[index];
-		} else if (char === quoteChar) quoteChar = "";
-		else key += char;
-		else if (bracket) if (char === "\"" || char === "'") {
-			quoteChar = char;
-			bracketHadQuote = true;
-		} else if (char === "]") {
-			bracket = false;
-			if (!bracketHadQuote && key.includes(".") && !bracketNumberRegex.test(key)) {
-				const segments = key.split(".");
-				for (let i = 0; i < segments.length; i++) if (segments[i] !== "") result.push(segments[i]);
-			} else result.push(key);
-			key = "";
-		} else key += char;
-		else if (char === "[") {
-			bracket = true;
-			bracketHadQuote = false;
-			if (key) {
-				result.push(key);
-				key = "";
-			}
-		} else if (char === ".") {
-			if (key) {
-				result.push(key);
-				key = "";
-			}
-			const next = deepKey[index + 1];
-			if (next === void 0 || next === ".") result.push("");
-		} else key += char;
-		index++;
-	}
-	if (key) result.push(key);
-	return result;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/get.mjs
-/**
-* Retrieves the value at a given path from an object. If the resolved value is undefined, the defaultValue is returned instead.
-*
-* @param object - The object to query.
-* @param path - The path of the property to get.
-* @param [defaultValue] - The value returned if the resolved value is undefined.
-* @returns Returns the resolved value.
-*
-* @example
-* const object = { a: { b: { c: 1 } } };
-* get(object, 'a.b.c');
-* // => 1
-*
-* get(object, ['a', 'b', 'c']);
-* // => 1
-*
-* get(object, 'a.b.d', 'default');
-* // => 'default'
-*/
-function get(object, path, defaultValue) {
-	if (object == null) return defaultValue;
-	switch (typeof path) {
-		case "string": {
-			if (isUnsafeProperty(path)) return defaultValue;
-			const result = object[path];
-			if (result === void 0) if (isDeepKey(path) && !Object.hasOwn(object, path)) return get(object, toPath(path), defaultValue);
-			else return defaultValue;
-			return result;
-		}
-		case "number":
-		case "symbol": {
-			if (typeof path === "number") path = toKey(path);
-			const result = object[path];
-			if (result === void 0) return defaultValue;
-			return result;
-		}
-		default: {
-			if (Array.isArray(path)) return getWithPath(object, path, defaultValue);
-			if (Object.is(path?.valueOf(), -0)) path = "-0";
-			else path = String(path);
-			if (isUnsafeProperty(path)) return defaultValue;
-			const result = object[path];
-			if (result === void 0) return defaultValue;
-			return result;
-		}
-	}
-}
-function getWithPath(object, path, defaultValue) {
-	if (path.length === 0) return defaultValue;
-	let current = object;
-	for (let index = 0; index < path.length; index++) {
-		if (current == null) return defaultValue;
-		if (isUnsafeProperty(path[index])) return defaultValue;
-		current = current[path[index]];
-	}
-	if (current === void 0) return defaultValue;
-	return current;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/isIndex.mjs
-const IS_UNSIGNED_INTEGER = /^(?:0|[1-9]\d*)$/;
-function isIndex(value, length = Number.MAX_SAFE_INTEGER) {
-	switch (typeof value) {
-		case "number": return Number.isInteger(value) && value >= 0 && value < length;
-		case "symbol": return false;
-		case "string": return IS_UNSIGNED_INTEGER.test(value);
-	}
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/getTag.mjs
-/**
-* Gets the `toStringTag` of `value`.
-*
-* @private
-* @param {T} value The value to query.
-* @returns {string} Returns the `Object.prototype.toString.call` result.
-*/
-function getTag(value) {
-	if (value == null) return value === void 0 ? "[object Undefined]" : "[object Null]";
-	return Object.prototype.toString.call(value);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/predicate/isArguments.mjs
-/**
-* Checks if the given value is an arguments object.
-*
-* This function tests whether the provided value is an arguments object or not.
-* It returns `true` if the value is an arguments object, and `false` otherwise.
-*
-* This function can also serve as a type predicate in TypeScript, narrowing the type of the argument to an arguments object.
-*
-* @param value - The value to test if it is an arguments object.
-* @returns `true` if the value is an arguments, `false` otherwise.
-*
-* @example
-* const args = (function() { return arguments; })();
-* const strictArgs = (function() { 'use strict'; return arguments; })();
-* const value = [1, 2, 3];
-*
-* console.log(isArguments(args)); // true
-* console.log(isArguments(strictArgs)); // true
-* console.log(isArguments(value)); // false
-*/
-function isArguments(value) {
-	return value !== null && typeof value === "object" && getTag(value) === "[object Arguments]";
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/has.mjs
-/**
-* Checks if a given path exists within an object.
-*
-* You can provide the path as a single property key, an array of property keys,
-* or a string representing a deep path.
-*
-* If the path is an index and the object is an array or an arguments object, the function will verify
-* if the index is valid and within the bounds of the array or arguments object, even if the array or
-* arguments object is sparse (i.e., not all indexes are defined).
-*
-* @param object - The object to query.
-* @param path - The path to check. This can be a single property key,
-*        an array of property keys, or a string representing a deep path.
-* @returns Returns `true` if the path exists in the object, `false` otherwise.
-*
-* @example
-*
-* const obj = { a: { b: { c: 3 } } };
-*
-* has(obj, 'a'); // true
-* has(obj, ['a', 'b']); // true
-* has(obj, ['a', 'b', 'c']); // true
-* has(obj, 'a.b.c'); // true
-* has(obj, 'a.b.d'); // false
-* has(obj, ['a', 'b', 'c', 'd']); // false
-* has([], 0); // false
-* has([1, 2, 3], 2); // true
-* has([1, 2, 3], 5); // false
-*/
-function has(object, path) {
-	let resolvedPath;
-	if (Array.isArray(path)) resolvedPath = path;
-	else if (typeof path === "string" && isDeepKey(path) && !(path in Object(object))) resolvedPath = toPath(path);
-	else resolvedPath = [path];
-	if (resolvedPath.length === 0) return false;
-	let current = object;
-	for (let i = 0; i < resolvedPath.length; i++) {
-		const key = resolvedPath[i];
-		if (current == null || !Object.hasOwn(current, key)) {
-			if (!((Array.isArray(current) || isArguments(current)) && isIndex(key) && key < current.length)) return false;
-		}
-		current = current[key];
-	}
-	return true;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/predicate/isObject.mjs
-/**
-* Checks if the given value is an object. An object is a value that is
-* not a primitive type (string, number, boolean, symbol, null, or undefined).
-*
-* This function tests whether the provided value is an object or not.
-* It returns `true` if the value is an object, and `false` otherwise.
-*
-* This function can also serve as a type predicate in TypeScript, narrowing the type of the argument to an object value.
-*
-* @param value - The value to check if it is an object.
-* @returns `true` if the value is an object, `false` otherwise.
-*
-* @example
-* const value1 = {};
-* const value2 = [1, 2, 3];
-* const value3 = () => {};
-* const value4 = null;
-*
-* console.log(isObject(value1)); // true
-* console.log(isObject(value2)); // true
-* console.log(isObject(value3)); // true
-* console.log(isObject(value4)); // false
-*/
-function isObject$1(value) {
-	return value !== null && (typeof value === "object" || typeof value === "function");
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/predicate/isSymbol.mjs
-/**
-* Check whether a value is a symbol.
-*
-* This function can also serve as a type predicate in TypeScript, narrowing the type of the argument to `symbol`.
-*
-* @param value The value to check.
-* @returns Returns `true` if `value` is a symbol, else `false`.
-* @example
-* isSymbol(Symbol.iterator);
-* // => true
-*
-* isSymbol('abc');
-* // => false
-*/
-function isSymbol(value) {
-	return typeof value === "symbol" || value instanceof Symbol;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/isKey.mjs
-/**  Matches any deep property path. (e.g. `a.b[0].c`)*/
-const regexIsDeepProp = /\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/;
-/**  Matches any word character (alphanumeric & underscore).*/
-const regexIsPlainProp = /^\w*$/;
-/**
-* Checks if `value` is a property name and not a property path. (It's ok that the `value` is not in the keys of the `object`)
-* @param {unknown} value The value to check.
-* @param {unknown} object The object to query.
-* @returns {boolean} Returns `true` if `value` is a property name, else `false`.
-*
-* @example
-* isKey('a', { a: 1 });
-* // => true
-*
-* isKey('a.b', { a: { b: 2 } });
-* // => false
-*/
-function isKey(value, object) {
-	if (Array.isArray(value)) return false;
-	if (typeof value === "number" || typeof value === "boolean" || value == null || isSymbol(value)) return true;
-	return typeof value === "string" && (regexIsPlainProp.test(value) || !regexIsDeepProp.test(value)) || object != null && Object.hasOwn(object, value);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/util/eq.mjs
-/**
-* Performs a `SameValueZero` comparison between two values to determine if they are equivalent.
-*
-* @param value The value to compare.
-* @param other The other value to compare.
-* @returns Returns `true` if the values are equivalent, else `false`.
-*
-* @example
-* eq(1, 1); // true
-* eq(0, -0); // true
-* eq(NaN, NaN); // true
-* eq('a', Object('a')); // false
-*/
-function eq(value, other) {
-	return value === other || Number.isNaN(value) && Number.isNaN(other);
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/_internal/assignValue.mjs
-const assignValue = (object, key, value) => {
-	const objValue = object[key];
-	if (!(Object.hasOwn(object, key) && eq(objValue, value)) || value === void 0 && !(key in object)) object[key] = value;
-};
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/_internal/isUnsafeToWriteProperty.mjs
-/**
-* Checks if a property key is unsafe to write to.
-*
-* Writing through `__proto__`, `constructor`, or `prototype` can reach
-* `Object.prototype` and pollute every object, so write paths like `set`,
-* `update`, and `zipObjectDeep` abort when a path segment matches one of
-* these keys, matching lodash's behavior.
-*
-* Read paths like `get` and `unset` use `isUnsafeProperty` instead, which
-* only blocks `__proto__`; lodash keeps reads of `constructor` and
-* `prototype` unrestricted.
-*
-* @param key - The property key to check
-* @returns `true` if the property is unsafe to write to, `false` otherwise
-* @internal
-*/
-function isUnsafeToWriteProperty(key) {
-	return key === "__proto__" || key === "constructor" || key === "prototype";
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/updateWith.mjs
-/**
-* Updates the value at the specified path of the given object using an updater function and a customizer.
-* If any part of the path does not exist, it will be created.
-*
-* @template T - The type of the object.
-* @template R - The type of the return value.
-* @param obj - The object to modify.
-* @param path - The path of the property to update.
-* @param updater - The function to produce the updated value.
-* @param customizer - The function to customize the update process.
-* @returns The modified object.
-*
-* @example
-* const object = { 'a': [{ 'b': { 'c': 3 } }] };
-* updateWith(object, 'a[0].b.c', (n) => n * n);
-* // => { 'a': [{ 'b': { 'c': 9 } }] }
-*/
-function updateWith(obj, path, updater, customizer) {
-	if (obj == null && !isObject$1(obj)) return obj;
-	let resolvedPath;
-	if (isKey(path, obj)) resolvedPath = [path];
-	else if (Array.isArray(path)) resolvedPath = path;
-	else resolvedPath = toPath(path);
-	const updateValue = updater(get(obj, resolvedPath));
-	let current = obj;
-	for (let i = 0; i < resolvedPath.length && current != null; i++) {
-		const key = toKey(resolvedPath[i]);
-		if (isUnsafeToWriteProperty(key)) return obj;
-		let newValue;
-		if (i === resolvedPath.length - 1) newValue = updateValue;
-		else {
-			const objValue = current[key];
-			const customizerResult = customizer?.(objValue, key, obj);
-			newValue = customizerResult !== void 0 ? customizerResult : isObject$1(objValue) ? objValue : isIndex(resolvedPath[i + 1]) ? [] : {};
-		}
-		assignValue(current, key, newValue);
-		current = current[key];
-	}
-	return obj;
-}
-//#endregion
-//#region node_modules/.pnpm/es-toolkit@1.51.0/node_modules/es-toolkit/dist/compat/object/set.mjs
-/**
-* Sets the value at the specified path of the given object. If any part of the path does not exist, it will be created.
-*
-* @template T - The type of the object.
-* @param obj - The object to modify.
-* @param path - The path of the property to set.
-* @param value - The value to set.
-* @returns The modified object.
-*
-* @example
-* // Set a value in a nested object
-* const obj = { a: { b: { c: 3 } } };
-* set(obj, 'a.b.c', 4);
-* console.log(obj.a.b.c); // 4
-*
-* @example
-* // Set a value in an array
-* const arr = [1, 2, 3];
-* set(arr, 1, 4);
-* console.log(arr[1]); // 4
-*
-* @example
-* // Create non-existent path and set value
-* const obj = {};
-* set(obj, 'a.b.c', 4);
-* console.log(obj); // { a: { b: { c: 4 } } }
-*/
-function set(obj, path, value) {
-	return updateWith(obj, path, () => value, () => void 0);
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/get-config-token.util.js
-/**
-* @publicApi
-*/
-function getConfigToken(token) {
-	return `CONFIGURATION(${token.toString()})`;
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/get-default-parser.util.js
-var import_main$1 = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const fs$2 = __require("fs");
-	const path = __require("path");
-	const os = __require("os");
-	const crypto = __require("crypto");
-	const TIPS = [
-		"◈ encrypted .env [www.dotenvx.com]",
-		"◈ secrets for agents [www.dotenvx.com]",
-		"⌁ auth for agents [www.vestauth.com]",
-		"⌘ custom filepath { path: '/custom/path/.env' }",
-		"⌘ enable debugging { debug: true }",
-		"⌘ override existing { override: true }",
-		"⌘ suppress logs { quiet: true }",
-		"⌘ multiple files { path: ['.env.local', '.env'] }"
-	];
-	function _getRandomTip() {
-		return TIPS[Math.floor(Math.random() * TIPS.length)];
-	}
-	function parseBoolean(value) {
-		if (typeof value === "string") return ![
-			"false",
-			"0",
-			"no",
-			"off",
-			""
-		].includes(value.toLowerCase());
-		return Boolean(value);
-	}
-	function supportsAnsi() {
-		return process.stdout.isTTY;
-	}
-	function dim(text) {
-		return supportsAnsi() ? `\x1b[2m${text}\x1b[0m` : text;
-	}
-	const LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/gm;
-	function parse(src) {
-		const obj = {};
-		let lines = src.toString();
-		lines = lines.replace(/\r\n?/gm, "\n");
-		let match;
-		while ((match = LINE.exec(lines)) != null) {
-			const key = match[1];
-			let value = match[2] || "";
-			value = value.trim();
-			const maybeQuote = value[0];
-			value = value.replace(/^(['"`])([\s\S]*)\1$/gm, "$2");
-			if (maybeQuote === "\"") {
-				value = value.replace(/\\n/g, "\n");
-				value = value.replace(/\\r/g, "\r");
-			}
-			obj[key] = value;
-		}
-		return obj;
-	}
-	function _parseVault(options) {
-		options = options || {};
-		const vaultPath = _vaultPath(options);
-		options.path = vaultPath;
-		const result = DotenvModule.configDotenv(options);
-		if (!result.parsed) {
-			const err = /* @__PURE__ */ new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
-			err.code = "MISSING_DATA";
-			throw err;
-		}
-		const keys = _dotenvKey(options).split(",");
-		const length = keys.length;
-		let decrypted;
-		for (let i = 0; i < length; i++) try {
-			const attrs = _instructions(result, keys[i].trim());
-			decrypted = DotenvModule.decrypt(attrs.ciphertext, attrs.key);
-			break;
-		} catch (error) {
-			if (i + 1 >= length) throw error;
-		}
-		return DotenvModule.parse(decrypted);
-	}
-	function _warn(message) {
-		console.error(`⚠ ${message}`);
-	}
-	function _debug(message) {
-		console.log(`┆ ${message}`);
-	}
-	function _log(message) {
-		console.log(`◇ ${message}`);
-	}
-	function _dotenvKey(options) {
-		if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) return options.DOTENV_KEY;
-		if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) return process.env.DOTENV_KEY;
-		return "";
-	}
-	function _instructions(result, dotenvKey) {
-		let uri;
-		try {
-			uri = new URL(dotenvKey);
-		} catch (error) {
-			if (error.code === "ERR_INVALID_URL") {
-				const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development");
-				err.code = "INVALID_DOTENV_KEY";
-				throw err;
-			}
-			throw error;
-		}
-		const key = uri.password;
-		if (!key) {
-			const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: Missing key part");
-			err.code = "INVALID_DOTENV_KEY";
-			throw err;
-		}
-		const environment = uri.searchParams.get("environment");
-		if (!environment) {
-			const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: Missing environment part");
-			err.code = "INVALID_DOTENV_KEY";
-			throw err;
-		}
-		const environmentKey = `DOTENV_VAULT_${environment.toUpperCase()}`;
-		const ciphertext = result.parsed[environmentKey];
-		if (!ciphertext) {
-			const err = /* @__PURE__ */ new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
-			err.code = "NOT_FOUND_DOTENV_ENVIRONMENT";
-			throw err;
-		}
-		return {
-			ciphertext,
-			key
-		};
-	}
-	function _vaultPath(options) {
-		let possibleVaultPath = null;
-		if (options && options.path && options.path.length > 0) {
-			if (Array.isArray(options.path)) {
-				for (const filepath of options.path) if (fs$2.existsSync(filepath)) possibleVaultPath = filepath.endsWith(".vault") ? filepath : `${filepath}.vault`;
-			} else possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
-		} else possibleVaultPath = path.resolve(process.cwd(), ".env.vault");
-		if (fs$2.existsSync(possibleVaultPath)) return possibleVaultPath;
-		return null;
-	}
-	function _resolveHome(envPath) {
-		return envPath[0] === "~" ? path.join(os.homedir(), envPath.slice(1)) : envPath;
-	}
-	function _configVault(options) {
-		const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options && options.debug);
-		const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || options && options.quiet);
-		if (debug || !quiet) _log("loading env from encrypted .env.vault");
-		const parsed = DotenvModule._parseVault(options);
-		let processEnv = process.env;
-		if (options && options.processEnv != null) processEnv = options.processEnv;
-		DotenvModule.populate(processEnv, parsed, options);
-		return { parsed };
-	}
-	function configDotenv(options) {
-		const dotenvPath = path.resolve(process.cwd(), ".env");
-		let encoding = "utf8";
-		let processEnv = process.env;
-		if (options && options.processEnv != null) processEnv = options.processEnv;
-		let debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || options && options.debug);
-		let quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || options && options.quiet);
-		if (options && options.encoding) encoding = options.encoding;
-		else if (debug) _debug("no encoding is specified (UTF-8 is used by default)");
-		let optionPaths = [dotenvPath];
-		if (options && options.path) {
-			if (!Array.isArray(options.path)) optionPaths = [_resolveHome(options.path)];
-			else {
-				optionPaths = [];
-				for (const filepath of options.path) optionPaths.push(_resolveHome(filepath));
-			}
-		}
-		let lastError;
-		const parsedAll = {};
-		for (const path of optionPaths) try {
-			const parsed = DotenvModule.parse(fs$2.readFileSync(path, { encoding }));
-			DotenvModule.populate(parsedAll, parsed, options);
-		} catch (e) {
-			if (debug) _debug(`failed to load ${path} ${e.message}`);
-			lastError = e;
-		}
-		const populated = DotenvModule.populate(processEnv, parsedAll, options);
-		debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || debug);
-		quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || quiet);
-		if (debug || !quiet) {
-			const keysCount = Object.keys(populated).length;
-			const shortPaths = [];
-			for (const filePath of optionPaths) try {
-				const relative = path.relative(process.cwd(), filePath);
-				shortPaths.push(relative);
-			} catch (e) {
-				if (debug) _debug(`failed to load ${filePath} ${e.message}`);
-				lastError = e;
-			}
-			_log(`injected env (${keysCount}) from ${shortPaths.join(",")} ${dim(`// tip: ${_getRandomTip()}`)}`);
-		}
-		if (lastError) return {
-			parsed: parsedAll,
-			error: lastError
-		};
-		else return { parsed: parsedAll };
-	}
-	function config(options) {
-		if (_dotenvKey(options).length === 0) return DotenvModule.configDotenv(options);
-		const vaultPath = _vaultPath(options);
-		if (!vaultPath) {
-			_warn(`you set DOTENV_KEY but you are missing a .env.vault file at ${vaultPath}`);
-			return DotenvModule.configDotenv(options);
-		}
-		return DotenvModule._configVault(options);
-	}
-	function decrypt(encrypted, keyStr) {
-		const key = Buffer.from(keyStr.slice(-64), "hex");
-		let ciphertext = Buffer.from(encrypted, "base64");
-		const nonce = ciphertext.subarray(0, 12);
-		const authTag = ciphertext.subarray(-16);
-		ciphertext = ciphertext.subarray(12, -16);
-		try {
-			const aesgcm = crypto.createDecipheriv("aes-256-gcm", key, nonce);
-			aesgcm.setAuthTag(authTag);
-			return `${aesgcm.update(ciphertext)}${aesgcm.final()}`;
-		} catch (error) {
-			const isRange = error instanceof RangeError;
-			const invalidKeyLength = error.message === "Invalid key length";
-			const decryptionFailed = error.message === "Unsupported state or unable to authenticate data";
-			if (isRange || invalidKeyLength) {
-				const err = /* @__PURE__ */ new Error("INVALID_DOTENV_KEY: It must be 64 characters long (or more)");
-				err.code = "INVALID_DOTENV_KEY";
-				throw err;
-			} else if (decryptionFailed) {
-				const err = /* @__PURE__ */ new Error("DECRYPTION_FAILED: Please check your DOTENV_KEY");
-				err.code = "DECRYPTION_FAILED";
-				throw err;
-			} else throw error;
-		}
-	}
-	function populate(processEnv, parsed, options = {}) {
-		const debug = Boolean(options && options.debug);
-		const override = Boolean(options && options.override);
-		const populated = {};
-		if (typeof parsed !== "object") {
-			const err = /* @__PURE__ */ new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
-			err.code = "OBJECT_REQUIRED";
-			throw err;
-		}
-		for (const key of Object.keys(parsed)) if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
-			if (override === true) {
-				processEnv[key] = parsed[key];
-				populated[key] = parsed[key];
-			}
-			if (debug) {
-				if (override === true) _debug(`"${key}" is already defined and WAS overwritten`);
-				else _debug(`"${key}" is already defined and was NOT overwritten`);
-			}
-		} else {
-			processEnv[key] = parsed[key];
-			populated[key] = parsed[key];
-		}
-		return populated;
-	}
-	const DotenvModule = {
-		configDotenv,
-		_configVault,
-		_parseVault,
-		config,
-		decrypt,
-		parse,
-		populate
-	};
-	module.exports.configDotenv = DotenvModule.configDotenv;
-	module.exports._configVault = DotenvModule._configVault;
-	module.exports._parseVault = DotenvModule._parseVault;
-	module.exports.config = DotenvModule.config;
-	module.exports.decrypt = DotenvModule.decrypt;
-	module.exports.parse = DotenvModule.parse;
-	module.exports.populate = DotenvModule.populate;
-	module.exports = DotenvModule;
-})))(), 1);
-const getDefaultParser = () => import_main$1.parse;
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config.service.js
-var __decorate$2 = function(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = function(k, v) {
-	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = function(paramIndex, decorator) {
-	return function(target, key) {
-		decorator(target, key, paramIndex);
-	};
-};
-/**
-* @publicApi
-*/
-let ConfigService = class ConfigService {
-	set isCacheEnabled(value) {
-		this._isCacheEnabled = value;
-	}
-	get isCacheEnabled() {
-		return this._isCacheEnabled;
-	}
-	set skipProcessEnv(value) {
-		this._skipProcessEnv = value;
-	}
-	get skipProcessEnv() {
-		return this._skipProcessEnv;
-	}
-	constructor(internalConfig = {}) {
-		this.internalConfig = internalConfig;
-		this.cache = {};
-		this._changes$ = new Subject();
-		this._skipProcessEnv = false;
-		this._isCacheEnabled = false;
-		this.envFilePaths = [];
-		this.parser = getDefaultParser();
-	}
-	/**
-	* Returns a stream of configuration changes.
-	* Each event contains the attribute path, the old value and the new value.
-	*/
-	get changes$() {
-		return this._changes$.asObservable();
-	}
-	/**
-	* Get a configuration value (either custom configuration or process environment variable)
-	* based on property path (you can use dot notation to traverse nested object, e.g. "database.host").
-	* It returns a default value if the key does not exist.
-	* @param propertyPath
-	* @param defaultValueOrOptions
-	*/
-	get(propertyPath, defaultValueOrOptions, options) {
-		const internalValue = this.getFromInternalConfig(propertyPath);
-		if (!isUndefined(internalValue)) return internalValue;
-		const validatedEnvValue = this.getFromValidatedEnv(propertyPath);
-		if (!isUndefined(validatedEnvValue)) return validatedEnvValue;
-		const defaultValue = this.isGetOptionsObject(defaultValueOrOptions) && !options ? void 0 : defaultValueOrOptions;
-		if (!this._skipProcessEnv) {
-			const processEnvValue = this.getFromProcessEnv(propertyPath, defaultValue);
-			if (!isUndefined(processEnvValue)) return processEnvValue;
-		}
-		return defaultValue;
-	}
-	/**
-	* Get a configuration value (either custom configuration or process environment variable)
-	* based on property path (you can use dot notation to traverse nested object, e.g. "database.host").
-	* It returns a default value if the key does not exist.
-	* If the default value is undefined an exception will be thrown.
-	* @param propertyPath
-	* @param defaultValueOrOptions
-	*/
-	getOrThrow(propertyPath, defaultValueOrOptions, options) {
-		const value = this.get(propertyPath, defaultValueOrOptions, options);
-		if (isUndefined(value)) throw new TypeError(`Configuration key "${propertyPath.toString()}" does not exist`);
-		return value;
-	}
-	/**
-	* Sets a configuration value based on property path.
-	* @param propertyPath
-	* @param value
-	*/
-	set(propertyPath, value) {
-		const oldValue = this.get(propertyPath);
-		set(this.internalConfig, propertyPath, value);
-		if (typeof propertyPath === "string") {
-			process.env[propertyPath] = String(value);
-			this.updateInterpolatedEnv(propertyPath, String(value));
-		}
-		if (this.isCacheEnabled) this.setInCacheIfDefined(propertyPath, value);
-		this._changes$.next({
-			path: propertyPath,
-			oldValue,
-			newValue: value
-		});
-	}
-	/**
-	* Sets env file paths from `config.module.ts` to parse.
-	* @param paths
-	*/
-	setEnvFilePaths(paths) {
-		this.envFilePaths = paths;
-	}
-	/**
-	* Sets parser from `config.module.ts`.
-	* @param parser
-	*/
-	setParser(parser) {
-		this.parser = parser;
-	}
-	getFromCache(propertyPath, defaultValue) {
-		const cachedValue = get(this.cache, propertyPath);
-		return isUndefined(cachedValue) ? defaultValue : cachedValue;
-	}
-	getFromValidatedEnv(propertyPath) {
-		return get(this.internalConfig[VALIDATED_ENV_PROPNAME], propertyPath);
-	}
-	getFromProcessEnv(propertyPath, defaultValue) {
-		if (this.isCacheEnabled && has(this.cache, propertyPath)) {
-			const cachedValue = this.getFromCache(propertyPath, defaultValue);
-			return !isUndefined(cachedValue) ? cachedValue : defaultValue;
-		}
-		const processValue = get(process.env, propertyPath);
-		this.setInCacheIfDefined(propertyPath, processValue);
-		return processValue;
-	}
-	getFromInternalConfig(propertyPath) {
-		return get(this.internalConfig, propertyPath);
-	}
-	setInCacheIfDefined(propertyPath, value) {
-		if (typeof value === "undefined") return;
-		set(this.cache, propertyPath, value);
-	}
-	isGetOptionsObject(options) {
-		return options && options?.infer && Object.keys(options).length === 1;
-	}
-	updateInterpolatedEnv(propertyPath, value) {
-		let config = {};
-		for (const envFilePath of this.envFilePaths) if (fs.existsSync(envFilePath)) config = Object.assign(this.parser(fs.readFileSync(envFilePath)), config);
-		const regex = new RegExp(`\\$\\{?${propertyPath}\\}?`, "g");
-		for (const [k, v] of Object.entries(config)) if (regex.test(v)) process.env[k] = v.replace(regex, value);
-	}
-};
-ConfigService = __decorate$2([
-	Injectable(),
-	__param(0, Optional()),
-	__param(0, Inject(CONFIGURATION_TOKEN)),
-	__metadata("design:paramtypes", [Object])
-], ConfigService);
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config-host.module.js
-var __decorate$1 = function(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-/**
-* @publicApi
-*/
-let ConfigHostModule = class ConfigHostModule {};
-ConfigHostModule = __decorate$1([Global(), Module({
-	providers: [{
-		provide: CONFIGURATION_TOKEN,
-		useFactory: () => ({})
-	}, {
-		provide: CONFIGURATION_SERVICE_TOKEN,
-		useClass: ConfigService
-	}],
-	exports: [CONFIGURATION_TOKEN, CONFIGURATION_SERVICE_TOKEN]
-})], ConfigHostModule);
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/create-config-factory.util.js
-/**
-* @publicApi
-*/
-function createConfigProvider(factory) {
-	return {
-		provide: factory.KEY || getConfigToken(randomUUID()),
-		useFactory: factory,
-		inject: []
-	};
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/get-registration-token.util.js
-/**
-* @publicApi
-*/
-function getRegistrationToken(config) {
-	return config[PARTIAL_CONFIGURATION_KEY];
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/merge-configs.util.js
-/**
-* @publicApi
-*/
-function mergeConfigObject(host, partial, token) {
-	if (token) {
-		set(host, token, partial);
-		return partial;
-	}
-	Object.assign(host, partial);
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/utils/validate-with-schema.util.js
-/**
-* Joi defaults to `allowUnknown: false` and `abortEarly: true`, which would
-* reject the unrelated variables that are always present in `process.env` and
-* report only the first failure. Previous versions of this package overrode
-* both, so they remain the defaults for Joi schemas unless the user opts out.
-*/
-const JOI_DEFAULT_LIBRARY_OPTIONS = {
-	abortEarly: false,
-	allowUnknown: true
-};
-/**
-* Validates config using a Standard Schema (e.g. Zod, Arktype).
-* @see https://standardschema.dev/
-*/
-async function validateWithStandardSchema(schema, config, options) {
-	const result = await schema["~standard"].validate(config, getLibraryOptions(schema, options));
-	if (result.issues) return {
-		error: new Error(formatIssues(result.issues)),
-		value: config
-	};
-	return { value: result.value };
-}
-function getLibraryOptions(schema, options) {
-	if (schema["~standard"].vendor !== "joi") return options;
-	return {
-		...options,
-		libraryOptions: {
-			...JOI_DEFAULT_LIBRARY_OPTIONS,
-			...options?.libraryOptions
-		}
-	};
-}
-function formatIssues(issues) {
-	return issues.map((issue) => {
-		const path = formatIssuePath(issue.path);
-		return path ? `${path}: ${issue.message}` : issue.message;
-	}).join("\n");
-}
-function formatIssuePath(path) {
-	return (path ?? []).map((segment) => typeof segment === "object" && segment !== null ? String(segment.key) : String(segment)).join(".");
-}
-//#endregion
-//#region node_modules/.pnpm/@nestjs+config@12.0.0_@nestjs+common@12.0.1_reflect-metadata@0.2.2_rxjs@7.8.2_supports-color@8.1.1__rxjs@7.8.2/node_modules/@nestjs/config/dist/config.module.js
-var __decorate = function(decorators, target, key, desc) {
-	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-	return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var ConfigModule_1;
-/**
-* @publicApi
-*/
-let ConfigModule = ConfigModule_1 = class ConfigModule {
-	/**
-	* This promise resolves when parser completes loading environment variables.
-	* When "ignoreEnvFile" is set to true, then it will resolve immediately after the
-	* "ConfigModule#forRoot" method is called.
-	*/
-	static get envVariablesLoaded() {
-		return this._envVariablesLoaded;
-	}
 	/**
-	* Loads environment variables based on the "ignoreEnvFile" flag and "envFilePath" value.
-	* Additionally, registers custom configurations globally.
-	* @param options
-	*/
-	static async forRoot(options = {}) {
-		const envFilePaths = Array.isArray(options.envFilePath) ? options.envFilePath : [options.envFilePath || resolve$1(process.cwd(), ".env")];
-		const parser = options.parser ?? getDefaultParser();
-		let validatedEnvConfig = void 0;
-		let config = options.ignoreEnvFile ? {} : this.loadEnvFile(envFilePaths, parser, options);
-		if (!options.ignoreEnvVars && options.validatePredefined !== false) config = options.override ? {
-			...process.env,
-			...config
-		} : {
-			...config,
-			...process.env
-		};
-		if (options.validate) {
-			const validatedConfig = options.validate(config);
-			validatedEnvConfig = validatedConfig;
-			this.assignVariablesToProcess(validatedConfig, options.override);
-		} else if (options.validationSchema) {
-			const { error, value: validatedConfig } = await validateWithStandardSchema(options.validationSchema, config, options.validationOptions);
-			if (error) throw new Error(`Config validation error: ${error.message}`);
-			validatedEnvConfig = {
-				...config,
-				...validatedConfig
-			};
-			this.assignVariablesToProcess(validatedEnvConfig, options.override);
-		} else this.assignVariablesToProcess(config, options.override);
-		const isConfigToLoad = options.load && options.load.length;
-		const providers = (await Promise.all(options.load || [])).map((factory) => createConfigProvider(factory)).filter((item) => item);
-		const configProviderTokens = providers.map((item) => item.provide);
-		const configServiceProvider = {
-			provide: ConfigService,
-			useFactory: (configService) => {
-				const untypedConfigService = configService;
-				if (options.cache) untypedConfigService.isCacheEnabled = true;
-				if (options.skipProcessEnv) untypedConfigService.skipProcessEnv = true;
-				configService.setEnvFilePaths(envFilePaths);
-				configService.setParser(parser);
-				return configService;
-			},
-			inject: [CONFIGURATION_SERVICE_TOKEN, ...configProviderTokens]
-		};
-		providers.push(configServiceProvider);
-		if (validatedEnvConfig) {
-			const validatedEnvConfigLoader = {
-				provide: VALIDATED_ENV_LOADER,
-				useFactory: (host) => {
-					host[VALIDATED_ENV_PROPNAME] = validatedEnvConfig;
-				},
-				inject: [CONFIGURATION_TOKEN]
-			};
-			providers.push(validatedEnvConfigLoader);
-		}
-		this.environmentVariablesLoadedSignal();
-		return {
-			module: ConfigModule_1,
-			global: options.isGlobal,
-			providers: isConfigToLoad ? [...providers, {
-				provide: CONFIGURATION_LOADER,
-				useFactory: (host, ...configurations) => {
-					configurations.forEach((item, index) => this.mergePartial(host, item, providers[index]));
-				},
-				inject: [CONFIGURATION_TOKEN, ...configProviderTokens]
-			}] : providers,
-			exports: [ConfigService, ...configProviderTokens]
-		};
-	}
-	/**
-	* Registers configuration object (partial registration).
-	* @param config
+	* @param pdf The PDF bytes to modify
+	* @param options Watermark options (`text` or `image` is required)
+	* @returns Modified PDF with the watermark stamped on the selected pages
+	* @description Stamps a text or image watermark on an existing PDF. By default the mark is centered, rotated by 45° at 15% opacity on every page. Use `position: 'tile'` to repeat it across the page and `pages` to target specific pages (1-based). To watermark a PDF while generating it, pass the same options as `watermark` in the `PuppeteerParameters`.
+	*
+	* ```typescript
+	* const watermarked = await pdfService.addWatermark(pdf, {
+	*   text: 'CONFIDENTIAL',
+	*   color: '#ff0000',
+	*   opacity: 0.2,
+	* });
+	* ```
+	*
+	* Text uses the PDF standard fonts, which only support WinAnsi characters; use an `image` for anything else.
+	* @throws WatermarkException when the options are invalid or the PDF cannot be processed
 	*/
-	static forFeature(config) {
-		const configProvider = createConfigProvider(config);
-		const serviceProvider = {
-			provide: ConfigService,
-			useFactory: (configService) => configService,
-			inject: [CONFIGURATION_SERVICE_TOKEN, configProvider.provide]
-		};
-		return {
-			module: ConfigModule_1,
-			providers: [
-				configProvider,
-				serviceProvider,
-				{
-					provide: CONFIGURATION_LOADER,
-					useFactory: (host, partialConfig) => {
-						this.mergePartial(host, partialConfig, configProvider);
-					},
-					inject: [CONFIGURATION_TOKEN, configProvider.provide]
-				}
-			],
-			exports: [ConfigService, configProvider.provide]
-		};
-	}
-	static loadEnvFile(envFilePaths, parser, options) {
-		let config = {};
-		for (const envFilePath of envFilePaths) if (fs$1.existsSync(envFilePath)) {
-			config = Object.assign(parser(fs$1.readFileSync(envFilePath)), config);
-			if (options.expandVariables) {
-				const expandOptions = typeof options.expandVariables === "object" ? options.expandVariables : {};
-				config = (0, import_main.expand)({
-					...expandOptions,
-					parsed: config
-				}).parsed || config;
-			}
-		}
-		return config;
-	}
-	static assignVariablesToProcess(config, override) {
-		if (!isObject(config)) return;
-		(override ? Object.keys(config) : Object.keys(config).filter((key) => !(key in process.env))).forEach((key) => {
-			const value = config[key];
-			if (typeof value === "string") process.env[key] = value;
-			else if (typeof value === "boolean" || typeof value === "number") process.env[key] = `${value}`;
-		});
-	}
-	static mergePartial(host, item, provider) {
-		const factoryRef = provider.useFactory;
-		mergeConfigObject(host, item, getRegistrationToken(factoryRef));
+	async addWatermark(pdf, options) {
+		return await addWatermark(pdf, options);
 	}
 };
-ConfigModule._envVariablesLoaded = new Promise((resolve) => ConfigModule_1.environmentVariablesLoadedSignal = resolve);
-ConfigModule = ConfigModule_1 = __decorate([Module({
-	imports: [ConfigHostModule],
-	providers: [{
-		provide: ConfigService,
-		useExisting: CONFIGURATION_SERVICE_TOKEN
-	}],
-	exports: [ConfigHostModule, ConfigService]
-})], ConfigModule);
+NestjsPdfService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [typeof PuppeteerService === "undefined" ? Object : PuppeteerService])], NestjsPdfService);
 //#endregion
 //#region src/puppeteer/puppeteer.module.ts
 var _PuppeteerModule;
@@ -2627,23 +1681,21 @@ let PuppeteerModule = _PuppeteerModule = class PuppeteerModule {
 		if (!this.#pdfParams.executablePath) await this.#browserService.install(this.#pdfParams.useLockedBrowser ?? false);
 	}
 	static forRoot(pdfParameters) {
-		const providers = [
-			{
-				provide: PDF_PARAMETERS,
-				useValue: pdfParameters
-			},
-			HandlebarsService,
-			MjmlService,
-			PugService,
-			EjsService,
-			NunjucksService,
-			EtaService,
-			MustacheService
-		];
 		return {
 			module: _PuppeteerModule,
-			imports: [ConfigModule.forRoot()],
-			providers,
+			providers: [
+				{
+					provide: PDF_PARAMETERS,
+					useValue: pdfParameters
+				},
+				HandlebarsService,
+				MjmlService,
+				PugService,
+				EjsService,
+				NunjucksService,
+				EtaService,
+				MustacheService
+			],
 			exports: [
 				PuppeteerService,
 				MjmlService,
@@ -2663,7 +1715,7 @@ let PuppeteerModule = _PuppeteerModule = class PuppeteerModule {
 		};
 		return {
 			module: _PuppeteerModule,
-			imports: [...options.imports ?? [], ConfigModule.forRoot()],
+			imports: options.imports ?? [],
 			providers: [
 				pdfParamsProvider,
 				PuppeteerService,
@@ -2688,7 +1740,7 @@ let PuppeteerModule = _PuppeteerModule = class PuppeteerModule {
 		};
 	}
 };
-PuppeteerModule = _PuppeteerModule = __decorate$3([
+PuppeteerModule = _PuppeteerModule = __decorate([
 	Module({
 		providers: [
 			PuppeteerService,
@@ -2734,8 +1786,8 @@ let NestjsPdfModule = _NestjsPdfModule = class NestjsPdfModule {
 		};
 	}
 };
-NestjsPdfModule = _NestjsPdfModule = __decorate$3([Module({})], NestjsPdfModule);
+NestjsPdfModule = _NestjsPdfModule = __decorate([Module({})], NestjsPdfModule);
 //#endregion
-export { BrowserInstallationException, BrowserUnavailableException, EjsService, EngineNotAvailableException, EtaService, HandlebarsService, MjmlService, MustacheService, NestjsPdfErrorCode, NestjsPdfException, NestjsPdfModule, NestjsPdfService, NunjucksService, PdfGenerationException, PugService, PuppeteerModule, PuppeteerService, SignatureDependencyException, SignaturePlacementException, TemplateConfigurationException, TemplateRenderException, getRelativePathToValue };
+export { BrowserInstallationException, BrowserUnavailableException, EjsService, EngineNotAvailableException, EtaService, HandlebarsService, MjmlService, MustacheService, NestjsPdfErrorCode, NestjsPdfException, NestjsPdfModule, NestjsPdfService, NunjucksService, PdfGenerationException, PugService, PuppeteerModule, PuppeteerService, SignatureDependencyException, SignaturePlacementException, TemplateConfigurationException, TemplateRenderException, WatermarkException, getRelativePathToValue };
 
 //# sourceMappingURL=index.mjs.map