Can I vibe code Lootly?

Build a custom, lightweight ecommerce loyalty and referral system for Shopify using Node.js, Express, Supabase (PostgreSQL), and Shopify Graphql Admin API.

1. DATA MODEL:
- Create tables: `customers` (id, shopify_customer_id, points_balance, lifetime_points, tier_id, referral_code, referred_by_customer_id), `point_transactions` (id, customer_id, amount, reason, order_id, created_at), `tiers` (id, name, threshold_spend, multiplier), `rewards` (id, title, points_cost, discount_value, discount_type), `referrals` (id, advocate_id, friend_email, status, reward_issued).

2. CORE FUNCTIONALITY:
- Order Processing: Expose a webhook endpoint `/webhooks/orders/paid`. Verify Shopify HMAC signature. Compute points earned = (order_subtotal * tier_multiplier). Insert transaction record and update customer balance atomically using a Postgres transaction.
- Refund Logic: Expose webhook `/webhooks/refunds/created`. Deduct points corresponding to refunded line items. Prevent balance from going below 0 unless configured.
- VIP Tiers: Evaluate customer lifetime spend on every completed order. If `lifetime_spend` crosses a tier threshold, update `tier_id` and fire an event to Klaviyo API.
- Redemptions: Expose endpoint POST `/api/rewards/redeem`. Verify customer has enough points. Deduct points. Call Shopify Admin GraphQL API to create a unique single-use `discountCodeBasicCreate` restricted to that customer's email. Return the discount code to the frontend.
- Referrals: Expose endpoint GET `/api/referrals/track?code=XYZ`. Associate referral code with standard session cookie. When referred user makes their first purchase, grant advocate bonus points.

3. FRONTEND WIDGET:
- Provide a clean, unstyled Web Component (Custom Element) that fetches point balance from `/api/customer/me` and renders available rewards with 'Redeem' buttons.

4. FAILURE MODES & SECURITY:
- Implement idempotent webhook processing using Shopify's `X-Shopify-Webhook-Id` header to prevent double-crediting points.
- Check for IP and email collision to block self-referrals.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs