execCaptureOutput runs QPDF and returns its stdout. This uses exec.CommandContext directly because gotenberg.Cmd does not support capturing stdout (it

exemplarFilterOptions returns the meter provider options that pin trace-based exemplars, so the histograms expose the trace id of a representative mea

findMetadataStream locates the document-level XMP metadata stream referenced by the Catalog /Metadata entry. It returns the object key (e.g. "obj:4 0

mustAssign parses the string value and tries to convert it to the target interface real type. Currently, only the string, bool, int, float64 and time.

newContext returns a [Context] by parsing a "multipart/form-data" request.

newLibreOfficeProxy binds a proxy listener to a free local port and applies opts to every proxied request. Callers must call [Start] before pointing s

newPoolSafeContext snapshots the given keys from c into a detached store and returns a wrapper whose Get/Set operate on that store exclusively. Keys a

path binds the absolute path of a form data file to a string variable.

paths bind the absolute paths of form data files, according to a list of file extensions, to a string slice variable. embeds, watermark, stamp, and fa

resolveHost resolves host and returns the addresses. When denyPrivate is true, a non-public address is rejected with [ErrNonPublicIP]. When denyPublic

validateMetadataValue rejects metadata values containing NUL, newline, or carriage return. NUL terminates C strings and is rejected by [exec.Cmd] anyw

writeSofficeProfileConfig drops a registrymodifications.xcu file into userProfileDirPath/user/ that points soffice's UCB layer at proxyAddr for both H

ActiveTasksCount returns the current number of active tasks.

BuildDebug builds the debug data from modules.

Command creates a [Cmd] without a context. It configures the internal [exec.Cmd] of [Cmd] so that we may kill its unix process and all its children wi

Convert transforms a given PDF to the specified formats defined in PdfFormats. If no format, it does nothing.

Debug returns additional debug data.

Debug returns additional debug data.

EmbedFilesMetadata sets metadata (such as MIME type and AFRelationship) on already-embedded files in a PDF. The metadata map is keyed by filename, wit

Embeds binds the absolute paths of form data files that should be embedded in the PDF. Only files uploaded with the "embeds" field name will be includ

Encrypt adds password protection and permission restrictions to a PDF file, as described by [EncryptOptions]. An empty user password with a set owner

FacturXXml binds the absolute path of the uploaded Factur-X CII invoice XML. Only a file uploaded with the "facturxXml" field name is included.

Flatten merges existing annotation appearances with page content, effectively deleting the original annotations. This process can flatten forms as wel

FormDataChromiumOptions creates [Options] from the form data. It falls back to the default value if the considered key is not present. JSON-encoded

FormDataPdfBookmarks creates bookmarks from the form data.

GetModuleDescriptors returns the descriptors of all registered modules.

InjectFacturXXMP injects Factur-X/ZUGFeRD XMP metadata into the document-level XMP packet (Catalog /Metadata stream) of a PDF/A-3. It registers the fx

IntEnv relies on [StringEnv] and converts the values if it exists and is not empty.

IsPublicIP reports whether addr is reachable on the public internet. It returns false for loopback, private (RFC1918), link-local, unspecified, multic

MapEnum returns value when it belongs to allowed, otherwise "other". It keeps a span attribute or metric dimension bounded even when an upstream tool

NewLeveledLogger instantiates a [LeveledLogger].

NewPdfEngineInvalidArgs creates a new PdfEngineInvalidArgsError with the given engine name and message.

PageCount returns the number of pages in a PDF file.

PdfEngine returns an instance of the [PdfEngine] interface for PDF operations.

Read a chunk of the stream.

ReadMetadata extracts the metadata of a given PDF file.

ReadPdfAConformance reads the PDF/A part and conformance (e.g., "3" and "B") from the document-level XMP packet (Catalog /Metadata stream, pdfaid:part

Rotate rotates pages of a PDF file by the given angle (90, 180, 270). If pages is empty, all pages are rotated.

SetEnv replaces the environment variables passed to the underlying process. When SetEnv is not called, the process inherits the parent's environment.

WriteBookmarksStub writes the bookmarks into PDF files. If no bookmarks, it does nothing.

WriteMetadata writes the metadata into a given PDF file.

conversionRequestAttributes derives low-cardinality attributes describing the requested conversion: the input document size and the requested PDF form

detectVersion resolves the pdfcpu version once, preferring the value captured at image build time so it never spawns pdfcpu at runtime. It falls back

detectVersion resolves the ExifTool version once, preferring the value captured at image build time so it never spawns ExifTool at runtime. It falls b

detectVersion resolves the PDFtk version once, preferring the value captured at image build time so it never spawns the PDFtk JVM at runtime. It falls

detectVersion resolves the qpdf version once, preferring the value captured at image build time so it never spawns qpdf at runtime. It falls back to r

detectVersion resolves the Chromium version once, preferring the value captured at image build time so it never spawns Chromium at runtime. It falls b

detectVersion resolves the LibreOffice version once, preferring the value captured at image build time so it never spawns LibreOffice at runtime. It f

doRestartLocked performs the restart drain logic. The caller must hold restartMutex.

engineName returns the module ID of a PDF engine for telemetry, falling back to its type name when it does not expose a descriptor.

facturXSchemaLi builds the rdf:li describing the fx schema and its four properties. These are fixed schema definitions, not runtime invoice values.

inches tries to compute a string value to inches.

isAllowedFileSubResource reports whether a file:// sub-resource URL is within at least one prefix. An empty prefix list rejects every file:// URL so r

isDangerousTag reports whether key matches one of the [dangerousTags] after case-insensitive comparison with any group prefix stripped.

isPdfA3 reports whether the format is a PDF/A-3 variant, the only family that allows the embedded files Factur-X requires.

libreofficeErrorType maps a conversion error to LibreOffice's bounded reason value, reused as the span error.type. Generic failures fall back to [gote

loadModule calls the Provision and/or Validate methods of the requested module if it satisfies the [Provisioner] and/or [Validator] interfaces.

mandatoryPath binds the absolute path of a form data file to a string variable. It populates an error if the file does not exist.

This code has been replaced with the listenForEventRequestPaused function. Indeed, the user may want to scope the headers per domain, but using networ

onLoadingFailed records a request that failed to complete.

originOf returns the scheme://host of rawURL, or an empty string when it has no host (for example data: or file: URLs).

parsePdfAId extracts the PDF/A part and conformance from an XMP packet. It handles both the element (<pdfaid:part>3</pdfaid:part>) and attribute (pdfa

pdfPageText extracts the text of a single page from a produced PDF using pdftotext. name is either a literal filename or a "*_" glob resolved against