Can I vibe code Cusrev?

Build a custom lightweight WordPress/WooCommerce plugin named 'Custom Commerce Reviews' that completely replaces Cusrev functionality locally without third-party SaaS dependencies.

1. DATA MODEL & STRUCTURE:
- Utilize native WordPress comments (comment_type = 'review') with custom comment meta: 'review_photos' (array of media attachment IDs), 'is_verified_buyer' (boolean), and 'coupon_issued' (boolean).
- Register a Custom Post Type named 'product_qa' linked to WooCommerce products using post_meta key '_product_id'. Support custom statuses for unanswered and answered questions.

2. AUTOMATED EMAIL SCHEDULER:
- Hook into 'woocommerce_order_status_completed'.
- Use WooCommerce Action Scheduler (`as_schedule_single_action`) to queue a review request email 7 days after order completion.
- Construct a clean HTML email template listing the purchased product titles with direct links to the review form on the site.

3. FRONTEND REVIEW FORM & MEDIA UPLOAD:
- Modify single product review forms using 'woocommerce_product_review_comment_form_args' to insert an image upload field (accepting JPG, PNG, WEBP; max 5MB, limit 3 files).
- Securely process uploads on comment post using `wp_handle_upload()`, create WP media attachments, and save attachment IDs to comment meta.
- Render uploaded photos in a gallery grid inside WooCommerce product review lists.

4. AUTOMATED COUPON INCENTIVE ENGINE:
- Hook into 'comment_post'. Check if the comment is a valid product review from a verified buyer.
- Programmatically generate a unique single-use WooCommerce coupon using `WC_Coupon` (e.g., 10% discount, valid for 30 days).
- Instantly send a thank-you email to the reviewer containing their unique coupon code.

5. PRODUCT Q&A TAB:
- Add a 'Questions & Answers' tab to WooCommerce product pages via 'woocommerce_product_tabs'.
- Display existing answered questions and a public submission form for new questions.
- Add an admin meta box in the WordPress backend for store managers to answer questions.

6. SECURITY & FAILURE MODES:
- Sanitize all text fields using `sanitize_text_field()` and validate form nonces on all submissions.
- Enforce strict file mime-type checking for image uploads to prevent malicious code execution.
- Gracefully handle cases where Action Scheduler fails or emails bounce.
- Out of scope: Third-party domain aggregation on external servers and external trust badges.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs