惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Engineering at Meta
Engineering at Meta
Hacker News: Ask HN
Hacker News: Ask HN
Know Your Adversary
Know Your Adversary
C
Cisco Blogs
T
The Exploit Database - CXSecurity.com
T
Threat Research - Cisco Blogs
Scott Helme
Scott Helme
T
Tor Project blog
T
Tenable Blog
P
Privacy & Cybersecurity Law Blog
C
Cybersecurity and Infrastructure Security Agency CISA
S
Securelist
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Hacker News - Newest:
Hacker News - Newest: "LLM"
S
Secure Thoughts
大猫的无限游戏
大猫的无限游戏
腾讯CDC
L
LangChain Blog
IT之家
IT之家
Recent Commits to openclaw:main
Recent Commits to openclaw:main
月光博客
月光博客
N
News and Events Feed by Topic
GbyAI
GbyAI
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
T
Tailwind CSS Blog
Jina AI
Jina AI
S
Security Affairs
T
The Blog of Author Tim Ferriss
博客园 - Franky
H
Hacker News: Front Page
Martin Fowler
Martin Fowler
D
DataBreaches.Net
酷 壳 – CoolShell
酷 壳 – CoolShell
Webroot Blog
Webroot Blog
L
Lohrmann on Cybersecurity
C
CXSECURITY Database RSS Feed - CXSecurity.com
U
Unit 42
S
Schneier on Security
B
Blog
Schneier on Security
Schneier on Security
Latest news
Latest news
TaoSecurity Blog
TaoSecurity Blog
Google DeepMind News
Google DeepMind News
The Register - Security
The Register - Security
Recorded Future
Recorded Future
O
OpenAI News
雷峰网
雷峰网
H
Heimdal Security Blog

The Practical Developer

The Libuv Thread Pool Trap: Why Node.js Async APIs Stall Under Load Postgres Covering Indexes with INCLUDE: Eliminate Heap Fetches on Read-Heavy Workloads Postgres DISTINCT ON: The Fastest Way to Get the Latest Row Per Group Postgres Transaction Isolation: The Anomalies Your App Actually Faces in Production Linux TCP Tuning for Node.js Microservices: The Kernel Settings That Stop Silent Connection Drops Under Load Postgres HOT Updates and Fillfactor: Why Not All Writes Are Created Equal Database Connection Pool Leaks: Finding the Promise That Never Returns Its Seat Linux OOM Killer in Production: Why Your Node.js Containers Die Without a Stack Trace Postgres Materialized Views: Refresh Strategies That Do Not Lock Your Dashboards API Dependency Health Checks: Why /health Is Not Enough Authorization with Zanzibar Tuples: How Google Manages Permissions and How To Build the Same Check in Node.js Postgres Advisory Locks: The 20-Character Primitive That Replaces Redis for Coordination Dead Letter Queues: The Message Queue Pattern That Saves You at 2 a.m. File Descriptor Exhaustion: The Kernel Limit That Silently Drops Node.js Connections Graceful Degradation: The Pattern That Turns Total Outages into Partial Success PostgreSQL Full-Text Search: Dropping Elasticsearch for 90% of Use Cases S3 Presigned Multipart Uploads: Stop Your API Server from Being a File Upload Bottleneck MessagePack vs JSON: The Binary Serialization Switch That Cut Our Internal RPC Overhead by 40% DNS Caching in Node.js: The Silent Cause of Production Latency Spikes Reliable Cron Jobs: The Pattern That Stops Double Runs, Missed Executions, And The 2 AM Page GraphQL Query Complexity: Stop the OOM Query Before It Reaches Your Resolver Node.js Event Loop Lag: The Hidden Metric Behind Random Latency Spikes API Request Validation with Zod: The Schema That Catches Bad Input Before It Corrupts Your Database Load Shedding in Node.js: How to Reject Traffic Before You Drown Request Hedging: Cut Tail Latency In Half Without Overprovisioning Git Bisect: The Automated Binary Search That Finds Breaking Commits in Minutes Node.js Garbage Collection Tuning: Stop Letting V8 Pause Your Event Loop Node.js Server Timeouts: The Settings That Stop Slow Clients from Holding Sockets Hostage Postgres BRIN Indexes: The Time-Series Secret That Shrinks Indexes by 99% Event Sourcing with PostgreSQL: The Pragmatic 80% Solution Node.js Cluster Mode: Scaling the Event Loop Across CPU Cores Postgres Partial Indexes: Stopping Soft Deletes from Ruining Your Query Performance Request Coalescing with the Singleflight Pattern: Stop Drowning Your Database on Every Cache Miss The Bulkhead Pattern: Why One Slow Endpoint Should Not Drown Your Whole Service Node.js AsyncLocalStorage: End-to-End Request Context Without the Propagation Hell Postgres Deadlocks: Logging the Victim, Reproducing the Race, and Fixing the Lock Order Your Node.js HTTP Client Is the Bottleneck: Connection Pool Tuning That Works Optimistic Locking in Postgres: Stop Losing Data to Race Conditions Postgres Read Replicas: Stop Serving Stale Data to Your Users Cursor Pagination: Why Offset Queries Explode at Scale and How to Fix Them Node.js Worker Threads: 60 Lines That Stop a CSV Upload from Timing Out Every Other Request Reliable Webhook Delivery: Architecture for Outbound HTTP You Can Trust Request Timeouts and Deadline Propagation: Stop the Chain of Slowness Advanced Security Practices in Node.js Graceful Shutdown in Node.js: The 40 Lines That Stop 502s During Deploys Finding Node.js Memory Leaks with Heap Snapshots Idempotency Keys in 30 Lines: Stop Your Webhook From Charging Customers Twice Backpressure In Node.js: The Fix For Slow-Motion Queue Meltdowns Retries Done Right: Jitter, Budgets, and the Stampede You Did Not See Coming The Cache Stampede: Why Your "Just Add Redis" Layer Crashes Postgres at 3 a.m. Postgres SKIP LOCKED: An 80-Line Job Queue You Can Run Without Redis Stop Doing Work Nobody Wants: AbortController in Node.js, Done Right The N+1 Query Problem: We Found 23 In One Codebase And Killed Every One I Tried 5 AI Coding Tools for a Month. Here Is What I Actually Use CI/CD From Zero to Production in 30 Minutes With GitHub Actions Node.js vs Bun vs Deno: Which Runtime Should You Pick in 2025? Kubernetes Resource Requests And Limits: The Numbers That Decide If Your Cluster Is Stable The Three Pillars of Observability Are A Myth: What Actually Matters In Production pnpm Vs npm Vs yarn Vs Bun For Monorepos: Which One Earns The Migration In 2024 JSONB Indexing In Postgres: GIN Vs Expression Indexes, And When Each Is The Right Choice A Code Review Checklist That Ends The Same Three Arguments Every Sprint gRPC Vs REST In 2024: When The Switch Pays For Itself React Suspense For Data Fetching: The Pattern That Replaces Half Your Loading State Code The Five-Stage Rollout: How To Ship A Risky Change Without Holding Your Breath GitHub Actions In A Monorepo: Caching, Path Filters, And Secret Boundaries That Actually Work The Blameless Postmortem That Actually Improves Things: A Template And Six Hard-Won Rules Recursive CTEs In Postgres: How To Query A Tree Without N Round Trips Node.js Streams: When They Actually Help, And When They Just Add Complexity Playwright Vs Cypress In 2024: The Honest Comparison Of Which One Earns The Test Time React Server Components: The Mental Model That Makes The "use client" Boundary Obvious Pod Disruption Budgets: The K8s Object That Keeps Your Service Up During Cluster Maintenance Postgres LISTEN/NOTIFY: The Pub/Sub You Already Have And Are Not Using Chaos Engineering Starter Kit: The Five Drills That Don't Need Netflix-Scale Spec-Driven API Development With OpenAPI: How To Stop Drifting From Your Docs Kubernetes Autoscaling Beyond CPU: The Custom-Metric HPA Pattern That Actually Works Postgres Partitioning For Time-Series: The Boring Setup That Saves Your Database Distributed Locks With Redis: An Honest Look At Redlock And When You Don't Need It HTTP/2 vs HTTP/3: What Actually Changes For Your App, And What Doesn't Image Optimization For The Web In 2023: srcset, AVIF, And The Lighthouse Score You Actually Want Kafka vs RabbitMQ: A Decision Tree That Doesn't Hate You UUID vs Bigint Primary Keys In Postgres: The Index Math That Decides For You Flame Graphs: How To Find The Slow Function In 30 Seconds Without Profiling Theatre Postgres Streaming Vs. Logical Replication: Which One Solves Your Actual Problem ESLint Rules That Earn Their Keep: The Twelve I Enable On Every Project Pre-Commit Hooks That Pay For Themselves: Husky, lint-staged, And The Five Rules That Stick Zero-Downtime Database Migrations: The Six-Step Pattern That Rules Them All Circuit Breakers In Node.js: 50 Lines That Stop A Failing Dependency From Taking Down Your Service Postgres VACUUM Is Not Magic: How Your Hot Table Bloats To 80GB And How To Fix It Kubernetes Liveness And Readiness Probes: The Difference That Causes Half Your Outages Rate Limiting In Production: A Token Bucket In 30 Lines Of Redis The Outbox Pattern: How To Stop Losing Events When Postgres And Kafka Disagree Load Testing With k6: The Three Scenarios That Find Real Bugs (Not Synthetic Numbers) Postgres Row-Level Security For Multi-Tenant Apps: The Pattern That Stops You From Leaking Data Rebase vs. Merge: The Team Policy That Ends The Argument Forever OpenTelemetry in Node.js: Distributed Tracing That Actually Helps During an Incident Feature Flags That Pay Rent: The 4 Flag Types And When To Delete Each ETag, Last-Modified, and the Caching Headers Most APIs Get Wrong Connection Pooling Without the Cargo Cult: pgbouncer in 100 Lines of Config JSONB Is Not a Schema: When To Reach For It in Postgres, And When To Stop Bash Strict Mode: The Three Lines That Stop Your Deploy Script From Lying To You
TypeScript Template Literal Types: The Feature That Replaces Half Your Generic Magic
The Practica · 2024-09-27 · via The Practical Developer

The team has a typed router. The route definitions look like:

type Routes =
  | '/users'
  | '/users/:id'
  | '/users/:id/orders'
  | '/users/:id/orders/:orderId'
  | // ... 80 more lines ...

When somebody adds a new route, they update this union manually. Half the time they forget. The runtime registers the route fine; the typechecker doesn’t know it exists. Autocomplete goes stale.

Template literal types are the TypeScript feature that lets you compute string types from other types. Instead of an 80-line union, the compiler can infer '/users/:id/orders/:orderId' from the route registration. Add a route, get autocomplete; remove a route, get a type error at every callsite.

This post is the four patterns that show up in real codebases, with working code and the perf implications.

The basic syntax

A template literal type uses backticks just like JS template strings, but with types instead of values:

type Greeting = `Hello, ${string}!`;
const a: Greeting = 'Hello, world!';   // ok
const b: Greeting = 'Hi there';        // error

That’s it. The type is a string with an enforced shape. Replace string with a more specific type to constrain further:

type HTTPMethod = 'GET' | 'POST' | 'PUT' | 'DELETE';
type Endpoint = `${HTTPMethod} ${string}`;

const a: Endpoint = 'GET /users';        // ok
const b: Endpoint = 'PATCH /users';      // error

Pattern 1: Typed routes

Build the route union from the registered routes; you don’t write it manually:

const routes = {
  '/users':                       () => listUsers(),
  '/users/:id':                  ({ id }: { id: string }) => getUser(id),
  '/users/:id/orders':           ({ id }: { id: string }) => listOrders(id),
  '/users/:id/orders/:orderId':  ({ id, orderId }: { id: string; orderId: string }) => getOrder(id, orderId),
} as const;

type Path = keyof typeof routes;
//   ^?  '/users' | '/users/:id' | '/users/:id/orders' | '/users/:id/orders/:orderId'

Now Path is the auto-derived union. Adding a new entry to routes adds it to Path automatically.

This is where template literals shine, extracting :id and :orderId out of a path string and producing a typed params object.

type ExtractParams<Path extends string> =
  Path extends `${string}:${infer Param}/${infer Rest}`
    ? { [K in Param | keyof ExtractParams<Rest>]: string }
    : Path extends `${string}:${infer Param}`
      ? { [K in Param]: string }
      : {};

type P1 = ExtractParams<'/users/:id'>;
//   ^?  { id: string }

type P2 = ExtractParams<'/users/:id/orders/:orderId'>;
//   ^?  { id: string; orderId: string }

Use this to generate typed handler signatures:

function defineRoute<Path extends string>(
  path: Path,
  handler: (params: ExtractParams<Path>) => unknown,
) {
  // implementation...
}

defineRoute('/users/:id/orders/:orderId', ({ id, orderId }) => {
  // id and orderId are both typed as string. Autocomplete works.
});

Pattern 3: Prefixed keys

A common pattern is “all keys in this object start with a known prefix”:

type Prefixed<T, Prefix extends string> = {
  [K in keyof T as `${Prefix}${string & K}`]: T[K];
};

type Original = { foo: number; bar: string };
type WithPrefix = Prefixed<Original, 'data_'>;
//   ^?  { data_foo: number; data_bar: string }

Useful for HTML data attributes, Tailwind variant generation, prefixed environment variable types.

The trick is as in the mapped type, which lets you transform the key.

Pattern 4: Builder method names

A setX, getX builder pattern from a type:

type Setters<T> = {
  [K in keyof T as `set${Capitalize<string & K>}`]: (v: T[K]) => Setters<T>;
};

type User = { id: string; name: string; age: number };
type UserBuilder = Setters<User>;
//   ^?  { setId: (v: string) => UserBuilder; setName: (v: string) => UserBuilder; setAge: (v: number) => UserBuilder }

Capitalize is one of TypeScript’s built-in string helpers. Others: Lowercase, Uppercase, Uncapitalize.

Note that this only types the builder; you still need a runtime implementation. Most cases use a runtime Proxy that dispatches setX to setting x.

Pattern 5: Validation at the type level

You can encode some shape constraints in the type system:

type Email = `${string}@${string}.${string}`;

const a: Email = 'alice@example.com';   // ok
const b: Email = 'not-an-email';        // error: missing @

This is not a substitute for runtime validation; many invalid emails pass this check (a@b.c does too). But it catches the obvious mistakes at compile time, before they get to runtime validators like Zod.

Performance considerations

Template literal types can be slow. The TypeScript compiler computes them eagerly, and a complex one (recursive, with many alternatives) can blow up.

Specifically:

  • Avoid deeply recursive parsing. A type that recursively breaks down a string into components can hit recursion depth limits and slow your IDE.
  • Avoid huge unions. A template literal that produces a union of 10,000 strings will tax everything.
  • Cap recursion explicitly. Use a depth-limit type to bound recursion:
type ExtractParams<Path extends string, Depth extends number = 10> =
  Depth extends 0 ? {} :
  Path extends `${string}:${infer P}/${infer Rest}`
    ? { [K in P]: string } & ExtractParams<Rest, Decrement<Depth>>
    : Path extends `${string}:${infer P}` ? { [K in P]: string } : {};

For real codebases, the limits rarely matter. But if your IDE is slow on a file using template literals, look here first.

Where this stops working

Template literal types are string-level manipulation. A few things they cannot do:

  • Decode JSON. A literal type cannot parse arbitrary JSON; it can only enforce shapes.
  • Compute arithmetic. No “five-digit number” type. Can pattern-match digits, can’t do math.
  • Replace a real parser. For things like SQL, GraphQL, regex, use a code generator at build time, not template literals at type-check time.

For lightweight string-shape constraints, template literals are the right tool. For anything more complex, generate code.

Real-world libraries using this

A few notable examples to study:

  • type-fest: many template-literal-based utilities (KebabCase, CamelCase, Get).
  • Tailwind CSS types: variant string types (hover:bg-red-500, md:text-lg) computed via template literals.
  • tRPC / Hono: typed route params extracted from string paths.
  • Drizzle ORM: typed SQL queries, table column types.

Reading their type definitions is a faster way to learn the patterns than abstract examples.

When to reach for them

A reasonable rule of thumb:

  • A small number of stringly-typed parameters? Use a union of literal strings.
  • Strings with a known structure derived from another type? Template literal.
  • A general parser? Generate code at build time; don’t use the type system.

Most teams under-use template literals out of unfamiliarity. They are not advanced TypeScript magic; they are the feature that catches the typo before runtime.

The takeaway

Template literal types turn string manipulation into type-checked operations. Four patterns (typed routes, parameter extraction, prefixed keys, builder methods) cover most real use cases. They are not for arbitrary parsing; they are for capturing the shape of strings you already work with.

The next time you find yourself maintaining a hand-written union of string literals, ask whether a template literal could derive it. The result is code that gets safer as the team adds new entries instead of going stale.


A note from Yojji

The kind of TypeScript fluency that turns string-based APIs into fully typed contracts, without runtime cost, is the kind of detail Yojji’s frontend and backend teams put into the codebases they hand back to clients.

Yojji is an international custom software development company founded in 2016, with teams across Europe, the US, and the UK. They specialize in the JavaScript ecosystem (React, Node.js, TypeScript), cloud platforms (AWS, Azure, GCP), and full-cycle product engineering, including the type-system work that decides whether a codebase grows safely or accumulates fragile shortcuts.