Can I vibe code Friendbuy?

Build a complete referral and loyalty engine microservice for a Shopify store using Node.js, Express, PostgreSQL, and Prisma.

CORE DATA MODELS:
1. Customer: id, shopify_customer_id, email, referral_code, points_balance, created_at.
2. Referral: id, advocate_id, friend_email, status ('pending', 'qualified', 'flagged'), friend_order_id, reward_issued_at, created_at.
3. RewardRule: id, event_type ('referral_purchase', 'loyalty_spend', 'account_creation'), points_earned, discount_value, discount_type ('fixed_amount', 'percentage'), min_order_value.
4. FraudLog: id, advocate_id, friend_email, reason, ip_address, user_agent, created_at.

CORE FUNCTIONALITY & APIS:
1. Referral Link Generation:
   - Endpoint GET /api/referral-code?shopify_customer_id=123
   - Generates or fetches a unique 8-character alphanumeric referral code for the advocate.
   - Endpoint GET /api/track-referral?code=XYZ
   - Drops an HTTP-only cookie (`referral_code`) valid for 30 days and redirects friend to target landing page.

2. Webhook Ingestion & Qualification:
   - Endpoint POST /webhooks/shopify/orders-create
   - Verifies HMAC signature of Shopify webhook payload.
   - Extracts customer email, order ID, order total, and checks for `referral_code` cookie or checkout attribute.
   - If referral code present:
     a. Run Fraud Check: If advocate email matches friend email OR advocate IP/device fingerprint matches friend IP from checkout log within 24 hours, set Referral status to 'flagged', create FraudLog entry, and halt.
     b. If valid: Mark Referral as 'qualified'. Use Shopify GraphQL Admin API (`discountCodeBasicCreate`) to programmatically generate two single-use discount codes: one for the advocate reward and one for the friend's future order (if rule dictates).
     c. Call Klaviyo API (`/api/events`) to fire custom event 'Referral Qualified' with the advocate's reward code.

3. Loyalty Points Engine:
   - Endpoint POST /webhooks/shopify/orders-paid
   - Calculates points earned based on order total subtotal (e.g., 1 point per $1 spent).
   - Updates Customer `points_balance`.
   - Endpoint POST /api/rewards/redeem
   - Accepts `shopify_customer_id` and `points_to_redeem`.
   - Validates balance >= points requested. Deducts balance, calls Shopify GraphQL API to generate dynamic discount code equal to reward value, and returns code to frontend.

OUT OF SCOPE:
- Native mobile app SDKs.
- WYSIWYG drag-and-drop widget builder (embeds will use simple REST API / React components).
- Third-party physical gift card integrations.

DELIVERABLE:
A production-ready Node.js app with full Prisma schema, Shopify REST/GraphQL integration helpers, fraud screening logic, Klaviyo event triggering, and error handling for Shopify API rate limits.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs