Production notes
Writing on Git, NestJS APIs, and JavaScript tooling — pnpm vs npm, security headers, logging, and OpenAPI notes from Mytheon.
Workflows runs multi-step processes durably: retries, timeouts, compensation, and waits of up to a year. How it works, how to call it from a backend, what it costs, and when Cloud Tasks, Pub/Sub, or Cloud Scheduler is the better fit.
16 min
Storing only the current balance answers where you are, not how you got there. What Event Sourcing actually is, how state is rebuilt, and when CRUD is the better architecture.
15 min
A timeout does not tell you whether the server processed the payment. What an idempotent operation actually means, how retries duplicate effects, and how an Idempotency-Key makes a retry safe.
13 min
TypeScript 7 ports the compiler and language service to Go. Same language, native tools — and what that means for editors, builds, and CI.
17 min
A check-then-act flow can sell the same seat twice. How atomic updates, constraints, locking, and idempotency keys keep exclusive resources consistent under concurrency.
16 min
JWT is a token format. An API key is a credential. This article shows how they differ, when each fits, and why a modern API can use both without picking a winner.
18 min
Microservices are not the required upgrade from a monolith. How to choose by domain, team, scale, and operational maturity — and what each choice actually costs.
15 min
Why a 30-day JWT is a bad session. How access tokens, refresh tokens, rotation, and revocation let a user stay signed in while limiting the lifetime of the credential that travels with every request.
21 min
Logging is not observability. How transactionId, traceId, and W3C Trace Context let you reconstruct a request across services — on Cloud Run, AWS, and Azure.
16 min
Pub/Sub is not a queue and not a REST replacement. How to design topics, subscriptions, retries, and idempotent consumers — and when HTTP or Cloud Tasks is the better fit.
17 min
The difference is the dependency model, not the CLI. How pnpm's store and isolated node_modules compare with npm and modern Yarn — and when each is the better fit.
16 min
What CORS, @nestjs/throttler, and Helmet actually protect in a NestJS API — and why none of them replace authentication, authorization, or input validation.
21 min
How to implement structured logs in NestJS with Pino so a payment is searchable by transactionId — the same identity the companion article separates from traceId.
20 min
OpenAPI is the contract. Swagger UI is the viewer. How NestJS builds an OpenAPI document from controllers and DTOs — and how to keep it honest in real teams.
16 min
Git is a local snapshot model. GitHub is the collaboration layer. How working trees, branches, merge, rebase, pull requests, and protection rules fit a real team workflow.
22 min