OptionalauthorizationGlobal authorization checker.
Controller classes to register. Accepts both class constructors and string glob patterns (e.g., 'src/controllers/**/*.ts'). String patterns are expanded at boot via tinyglobby (optional peer dependency) relative to process.cwd(). All exported classes from matched modules are treated as controllers; non-class exports are silently skipped.
OptionalcorsCORS option. When true, mounts cors() with default options (Access-Control-Allow-Origin: *). When a CorsOptionsLike object is provided, mounts cors(options). Requires the cors package as an optional peer dependency. Mounts AFTER ALS middleware, BEFORE lib globals.
OptionalcurrentGlobal current-user checker.
OptionaldefaultWhen false, library does not mount its error middleware. Default true.
OptionalinterceptorsInterceptor classes.
OptionalmiddlewaresMiddleware classes/functions.
OptionalonWR-03: optional logger for the rare "error arrived after res.headersSent"
path inside libraryErrorMiddleware. The library normally calls
console.error for this case; setting onLogError redirects it (e.g.
to a structured-log daemon, or () => {} to silence). The supplied
function MUST NOT throw.
OptionalprintLog a route table at boot. When true, prints a fixed-format METHOD / PATH / CONTROLLER.METHOD column table to console.log after all routers are mounted. Walks library metadata only — does NOT introspect Express internals. Recommended for development only; keep disabled in production.
OptionalrouteOptional path prefix prepended to every controller. Path composition rules apply.
OptionalvalidationReserved for future validation overrides (e.g., a non-Standard-Schema escape hatch).
Library boot options.