Re:Show HN: Apcher – Generate self-hosted Node.js workflows ...
by guerython on Tuesday March 03, 2026 @01:13PM
(#47236375)
nice to see prompt-to-node automation getting some love. when we tried something similar we treated the generated flow as code: we wrap it in a type-safe template, lint it, and run fixture-based checks before shipping. curious how apcher manages secrets/env config and how you prove the generated pipeline actually works before importing it?
Re:Show HN: Apcher – Generate self-hosted Node.js workflows ...
by Samueedwards1 on Tuesday March 03, 2026 @01:24PM
(#47236533)
Great question—we treat generated code as production code too.
Secrets/Env:
- `${{ secrets.YOUR_SECRET }}` GitHub Actions syntax throughout
- `.env.example` + docker-compose.yml with all expected vars
- No hardcoded values; all externalized
Proving it works:
- Built-in fixture tests (`npm test`) for every integration point
- `npm run apcher:full-scan` catches CVEs + dep issues pre-ZIP
- Watchdog generates synthetic drift tests that run on startup
- Idempotency baked in (safe to retry 1K times)
Example ZIP includes Stripe test mode keys + Postgres docker fixture.
Re:Show HN: Apcher – Generate self-hosted Node.js workflows ...
by Samueedwards1 on Tuesday March 03, 2026 @01:49PM
(#47236909)
Correct—no open source.
$59/workflow → production Node.js you own completely (no license restrictions, run 1M times anywhere). Full export, no host, time, or execution fee. Output = yours forever.
Once expanded to production-safe logic, it became 19 steps.
First 6:
Verify webhook signature (STRIPE_WEBHOOK_SECRET)
Extract event.id, subscription.customer, price.id
Ensure price.id === pro_annual_price_id
Check processed_events for event.id
Insert event.id before side effects
Fetch full customer via Stripe SDK
Snippet:
`npm run apcher:full-scan` catches CVEs + deps upfront.
Includes: - Express server + full routes - Watchdog (API drift detection, CVE scans via npm run apcher:full-scan) - Retries, idempotency, peter-evans/create-pull-request@v6 for auto PRs - `npm install && npm start` ready
$59/workflow. No subs, deploy anywhere.
Try it: apcher.dev Give me you feedback
Secrets/Env: - `${{ secrets.YOUR_SECRET }}` GitHub Actions syntax throughout - `.env.example` + docker-compose.yml with all expected vars - No hardcoded values; all externalized
Proving it works: - Built-in fixture tests (`npm test`) for every integration point - `npm run apcher:full-scan` catches CVEs + dep issues pre-ZIP - Watchdog generates synthetic drift tests that run on startup - Idempotency baked in (safe to retry 1K times)
Example ZIP includes Stripe test mode keys + Postgres docker fixture.
Think "Cursor for backend workflows" — prompt → production ZIP with Watchdog/CI/etc. baked in.
Generator stays at apcher.dev; output = yours forever, no license restrictions beyond standard use. No success tax—you run it 1M times on your infra.
$59/workflow → production Node.js you own completely (no license restrictions, run 1M times anywhere). Full export, no host, time, or execution fee. Output = yours forever.
Stripe customer.subscription.created → verify → idempotency → Postgres → provision workspace → SendGrid → Slack → monitoring.
Once expanded to production-safe logic, it became 19 steps.
First 6: Verify webhook signature (STRIPE_WEBHOOK_SECRET) Extract event.id, subscription.customer, price.id Ensure price.id === pro_annual_price_id Check processed_events for event.id Insert event.id before side effects Fetch full customer via Stripe SDK Snippet:
Js id="j3m4zl"
if (!Stripe.verifyWebhookSignature(req.body, signature, process.env.STRIPE_WEBHOOK_SECRET)) { return { success: false, error: 'Invalid webhook signature' }; }
const [existingEvent] = await PostgreSQL.query( 'SELECT * FROM processed_events WHERE id = $1', [eventId] );
if (existingEvent) { return { success: true, message: 'Event already processed' }; } Generated structure: Id="s2x9pq"
my-workflow/ ├── integration.js ├── scripts/ ├── .env.example ├── apcher.lock ├── github/ └── README.md
The surprising part wasn’t the API calls — it was how much production scaffolding each “simple webhook” really needs.
Curious how others here handle idempotent webhook pipelines in production.
Current "Solution": Rent proprietary runtimes. Swap plumbing for vendor lock-in + exec tax.
Apcher: Generate resilience directly into your Node.js repo. Atomic SQL, native retries, Watchdog drift PRs.
$0 exec fees. Full export—deploy anywhere, run locally, live in your repo.
Who's brittle today?
Raw Stripe → 3x retries + idempotency + conflict DOs + rollbacks.
Apcher injects resilience into your Node.js repo. Try it for free. Test chaos locally.
What broke your last payment flow? apcher.dev