tsconfig.json
Treat tsconfig as the project contract that defines which files are checked and how.
Learning Objectives
After completing this lesson, you will be able to:
- Explain tsconfig.json in terms of compilerOptions, include, exclude, files, and extends.
- Model making local editors, CI, and bundlers check the same program without weakening the contract to any.
- Trace what the compiler checks and what JavaScript remains at runtime.
- Recognize and correct this recurring failure mode: keeping multiple conflicting tsconfig files with no documented purpose.
- Defend when to use tsconfig.json and when a simpler design is clearer.
- Distinguish the compile-time guarantees of tsconfig.json from runtime behavior.
- Read and explain compiler diagnostics related to tsconfig.json.
- Choose a simpler alternative when tsconfig.json would add unnecessary complexity.
- Apply tsconfig.json without weakening untrusted input to any.
- Review tsconfig.json for maintainability in a multi-team codebase.
- Test both accepted and intentionally rejected type scenarios.
- Identify the trust boundaries around code that uses tsconfig.json.
- Evaluate checker, build, bundle, and runtime costs separately.
- Explain the security limitations of erased TypeScript types.
- Use tsconfig.json in a production-oriented TechLearningPro design.
Introduction
A growing TechLearningPro codebase must support making local editors, CI, and bundlers check the same program. Copying loosely related types makes valid changes expensive and lets assumptions drift between the UI, application services, and API adapters. The team needs a design that expresses the relationship explicitly while remaining understandable to reviewers.
This lesson approaches tsconfig.json as an engineering decision rather than syntax to memorize. You will connect the developer experience to the TypeScript compiler, emitted JavaScript, production boundaries, and the maintenance costs paid by a team over time.
What Is This Concept?
In simple language: tsconfig.json tells the compiler the program boundary and the checking rules.
Professional explanation: tsconfig.json is a compile-time modeling technique based on compilerOptions, include, exclude, files, and extends. It lets the checker preserve domain relationships, reject inconsistent programs, and communicate intent without claiming that a TypeScript type validates values at runtime.
Why Do We Need It?
Without tsconfig.json
│
▼
Ambiguous intent and defects discovered late
│
▼
TypeScript models the contract
│
▼
Earlier feedback, safer change, clearer design- It makes the relationship behind making local editors, CI, and bundlers check the same program visible in the program.
- It moves many integration mistakes into editor and CI feedback.
- It reduces duplicated contracts that can drift during refactoring.
- It gives maintainers a precise vocabulary for reviewing design changes.
- It supports the key engineering decision: one base config, optional specialized configs that extend it.
Real-World Analogy
House rules posted at the entrance apply to every room unless a room posts a specific exception.
How It Works
Compile time
The checker applies compilerOptions, include, exclude, files, and extends, resolves the resulting relationships, and reports assignments or operations that violate them. These checks happen during editing or compilation and are erased from ordinary JavaScript output.
Runtime
At runtime, tsconfig.json has no independent type-level behavior: emitted JavaScript follows ordinary JavaScript semantics. External data still requires runtime validation.
- 1. Identify the invariant in the requirement: making local editors, CI, and bundlers check the same program.
- 2. Represent only the information the compiler needs to preserve that invariant.
- 3. Apply compilerOptions, include, exclude, files, and extends and inspect inference rather than guessing it.
- 4. Compile under strict mode and test both accepted and rejected calls.
- 5. Inspect emitted JavaScript when runtime behavior matters.
- 6. Validate unknown input before it enters the trusted typed core.
Architecture / Flow Diagram
Domain requirement: making local editors, CI, and bundlers check the same program
│
▼
Type model: tsconfig.json
│ compiler applies compilerOptions, include, exclude, files, and extends
▼
Accepted program ──or── precise diagnostic
│
▼
Emitted JavaScript (types erased)
│
▼
Runtime validation at every untrusted boundaryCode Examples
Basic Example: Smallest useful model
This isolates the essential behavior of tsconfig.json.
{"compilerOptions": {"target": "ES2022","module": "NodeNext","strict": true}}
Intermediate Example: Application boundary
This applies the idea to making local editors, CI, and bundlers check the same program.
{"extends": "./tsconfig.base.json","include": ["src"]}
Advanced Example: Production-oriented design
This version makes the trade-off—one base config, optional specialized configs that extend it—explicit.
{"compilerOptions": { "noUncheckedIndexedAccess": true }}
Enterprise Example
TechLearningPro uses tsconfig.json while implementing making local editors, CI, and bundlers check the same program. A boundary adapter first validates HTTP or queue payloads as unknown. The application layer then relies on the static contract, and the domain layer stays independent of transport details. Reviewers can distinguish a compile-time guarantee from authorization, validation, and other runtime controls.
Student │ ▼ React / Angular UI │ typed command ▼ Application service │ validated DTO ▼ API client ─────► Runtime schema at trust boundary │ ▼ Backend API
Deep Dive
compilerOptions, include, exclude, files, and extends is useful because it preserves a relationship rather than merely replacing a long annotation with a short name. If no meaningful relationship is being enforced, the abstraction may be ceremony.
The principal design risk is keeping multiple conflicting tsconfig files with no documented purpose. A strong design keeps diagnostics readable, exposes a small public surface, and documents the invariant in domain language.
tsconfig.json should end at a trust boundary. Parsed JSON, storage records, environment variables, and third-party SDK values begin as unknown; validation creates runtime evidence before a typed domain value is constructed.
The governing trade-off is one base config, optional specialized configs that extend it. Prefer the least powerful construct that keeps invalid states unrepresentable and remains easy for another engineer to modify.
Common Mistakes
For each mistake, identify the false assumption and replace it with an explicit contract:
- 1. Treating tsconfig.json as runtime validation; types are erased and hostile input is unchanged.
- 2. Using any to silence a failure instead of understanding compilerOptions, include, exclude, files, and extends.
- 3. Ignoring the central pitfall: keeping multiple conflicting tsconfig files with no documented purpose.
- 4. Adding assertions before proving the asserted fact.
- 5. Designing from implementation shapes instead of domain invariants.
- 6. Publishing an abstraction whose diagnostics are harder than the duplicated code.
- 7. Testing only successful examples and never adding compile-time negative cases.
- 8. Coupling domain contracts to a framework, transport, or generated client unnecessarily.
- 9. Assuming a more sophisticated type improves runtime speed; it does not.
- 10. Repeating a previously taught contract instead of composing the next layer of the design.
Best Practices
- Enable strict mode and keep strictNullChecks on.
- Start with a concrete domain example before extracting an abstraction.
- Name the invariant behind making local editors, CI, and bundlers check the same program.
- Document why compilerOptions, include, exclude, files, and extends is necessary.
- Prefer unknown to any at untrusted boundaries.
- Validate external values with runtime code or a schema library.
- Keep public contracts smaller than private implementation types.
- Let inference handle local details; annotate exported boundaries.
- Use type tests for both expected success and expected failure.
- Keep compiler diagnostics understandable to the consuming team.
- Avoid assertions unless runtime evidence or construction proves them.
- Inspect generated declarations for library-facing APIs.
- Measure checker latency before blaming an advanced construct.
- Separate domain types from wire-format DTOs.
- Review optionality, mutability, and nullability deliberately.
- Revisit the decision periodically: one base config, optional specialized configs that extend it.
Performance
Type annotations normally have no direct runtime cost because they are removed from emitted JavaScript. Performance work must separate editor/type-checking cost, compilation cost, bundle output, and actual JavaScript execution.
- tsconfig.json normally changes checker work, not JavaScript execution speed.
- Deep composition can increase editor and CI type-checking time; measure with compiler diagnostics before simplifying.
- Runtime performance depends on emitted algorithms, allocations, I/O, and validation—not on erased annotations.
- Type-driven refactoring may enable better code, but benchmark the emitted application rather than claiming a type-level speedup.
Security
Static types improve reviewability and make invalid internal states harder to express, but they are not a security boundary. Attackers interact with the emitted JavaScript and network interfaces, not your type declarations.
- Parse untrusted input as unknown and validate structure, ranges, formats, and size at runtime.
- Keep authentication and authorization checks in executable code.
- Do not let an assertion convert attacker-controlled data into a trusted domain value.
- Avoid exposing sensitive fields merely because a projected type hides them; the runtime object may still contain them.
- Use tsconfig.json to improve reviewability, while treating validation and policy enforcement as separate controls.
Real-World Architecture
Place tsconfig.json in the narrowest stable layer that owns its invariant. Transport adapters validate data and map DTOs; application services coordinate use cases; domain modules expose purposeful contracts; infrastructure implements those contracts.
Interview Questions & Answers
Beginner
1What problem does tsconfig.json solve?+
2Does tsconfig.json exist at runtime?+
3What JavaScript remains after the types used by tsconfig.json are erased?+
4How should a developer read an error related to tsconfig.json?+
5When is unknown safer than any in this lesson?+
Intermediate
1How would you test this type-level design?+
2How would you add a negative type test for tsconfig.json?+
3Where should annotations be explicit and where should inference lead?+
4How do runtime schemas cooperate with tsconfig.json?+
Senior
1When would you reject this construct in review?+
2How would you keep tsconfig.json from leaking across architectural layers?+
3What metrics would you inspect before optimizing this type design?+
4When should a team simplify its use of tsconfig.json?+
Architect
1How should this live in a large platform?+
2How would you govern tsconfig.json across a monorepo?+
3What is the migration strategy if teams currently rely on any?+
4How do security and maintainability trade-offs affect this design?+
Practical Exercise
Problem: Write a base tsconfig and a src-only tsconfig that extends it.
Difficulty: Beginner
Requirements
- Compile under strict mode.
- Keep untrusted input as unknown until validated.
- Avoid any except as a documented last resort.
- Show one accepted and one rejected type scenario.
Expected behavior: A small TechLearningPro module that uses tsconfig.json to protect making local editors, CI, and bundlers check the same program and documents the runtime boundary.
Hints
- Start from compilerOptions, include, exclude, files, and extends.
- Watch for keeping multiple conflicting tsconfig files with no documented purpose.
- Inspect emitted JavaScript if runtime behavior is in doubt.
The complete solution is intentionally withheld. First model the contract, compile under strict mode, and explain every assertion or escape hatch during review.
Key Takeaways
- tsconfig.json models making local editors, CI, and bundlers check the same program through compilerOptions, include, exclude, files, and extends.
- Types are erased; they do not validate runtime data.
- Unknown external values require runtime validation.
- The main hazard is keeping multiple conflicting tsconfig files with no documented purpose.
- The key trade-off is one base config, optional specialized configs that extend it.
- Strict mode and negative type tests make the contract more reliable.
- Small public surfaces improve diagnostics and maintainability.
- Type sophistication is valuable only when it preserves a real invariant.
- Security controls and performance claims require runtime evidence.
- Compose the next lesson instead of reteaching this contract from scratch.
Summary
tsconfig.json gives TechLearningPro a precise way to model making local editors, CI, and bundlers check the same program through compilerOptions, include, exclude, files, and extends. Used with strict checking, boundary validation, and deliberate ownership, it improves change safety without pretending that erased types enforce runtime policy.
Next Lesson Preview
Next, study Basic Types. The next lesson extends this foundation with another production modeling technique.