Can I vibe code Feedback Company?

Build a lightweight Node.js/TypeScript post-purchase review engine using Express, PostgreSQL, Prisma ORM, and Resend for transactional email dispatch.

1. DATA MODEL:
Create Prisma models:
- Order: id, externalOrderId, customerEmail, customerName, storeId, status, fulfilledAt (DateTime)
- ReviewRequest: id, orderId (relation), token (unique string), sentAt, status ('PENDING'|'COMPLETED'|'EXPIRED')
- Review: id, orderId (unique relation), rating (int, 1-5), title, body, authorName, verifiedBuyer (boolean, default true), status ('PENDING'|'APPROVED'|'REJECTED'), createdAt

2. BACKGROUND WORKER:
Create a Cron job running hourly. Query Orders fulfilled 7 days ago where no ReviewRequest exists. For each, create a ReviewRequest record with a secure UUID token. Send a transactional email using Resend with a link to `https://store.com/review?token=UUID`.

3. REVIEW SUBMISSION API:
Build POST /api/reviews. Validate the payload (rating 1-5, title, body, authorName, token). Verify that the token exists and status is PENDING. Set review verifiedBuyer to true, set status to PENDING for moderation, and update ReviewRequest status to COMPLETED. Return 201 Created.

4. PUBLIC WIDGET API & JSON-LD:
Build GET /api/reviews/widget. Accept query parameter storeId. Cache responses using Redis. Return an array of APPROVED reviews, average Rating (float), total Count (int), and an auto-generated JSON-LD string matching Google's Schema.org AggregateRating format.

5. FRONTEND EMBED:
Write a zero-dependency Native Web Component (<custom-review-widget>) packaged into a single JS file. The component fetches data from GET /api/reviews/widget, injects the JSON-LD script tag into the host document head, and renders a clean, accessible aggregate score badge and list of recent reviews.

6. FAILURE HANDLING & SAFETY:
Reject review submissions if token is invalid or completed. Implement strict rate limiting (5 requests/minute per IP) on submission endpoints. Sanitize all incoming text fields to prevent XSS. Explicitly note: Google Seller Ratings syndication API is out of scope.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs