Can I vibe code Postman?

Build a lightweight, web-based API Client and Collection Runner specifically tailored for e-commerce API development (Shopify Admin GraphQL, BigCommerce REST, WooCommerce REST).

CORE REQUIREMENTS:
1. UI WORKSPACE: A clean split-pane UI with a left sidebar for Request Collections (folders, requests) and Environment Variables (e.g., store_url, access_token).
2. REQUEST BUILDER: Support HTTP methods (GET, POST, PUT, DELETE, PATCH) and GraphQL queries. Include tabbed panels for Query Params, Headers, Body (JSON, Form Data, Raw), and Pre-request/Test Scripts.
3. EXECUTION ENGINE: An express backend proxy endpoint (/api/proxy) to send HTTP/GraphQL requests server-side, bypassing browser CORS restrictions. Forward all headers, cookies, and body payloads accurately.
4. SCRIPTING & TESTING: Implement a node VM sandbox (using safe-eval or isolate-vm) that executes JavaScript test scripts against the HTTP response object (status, headers, body). Provide standard assertion helpers (e.g., expect(res.status).toBe(200)).
5. VARIABLE CHAINING: Automatically parse response bodies in test scripts to update active Environment Variables (e.g., extracting an OAuth token or Shopify ID for subsequent requests).
6. COLLECTION RUNNER: A batch execution mode that runs all requests inside a folder sequentially, applying environment variables, executing test scripts, and generating an interactive pass/fail test report.
7. IMPORT/EXPORT: Support importing and exporting collections in standard JSON format and converting requests to cURL commands.

OUT OF SCOPE:
- WebSocket, gRPC, or MQTT protocols.
- Native Git syncing and cloud team synchronization.
- Mock servers and AI prompt assistants.

DATA MODEL:
- Collection: { id, name, description, folders: [], requests: [] }
- Request: { id, name, method, url, headers: [], params: [], body: { mode, raw }, preRequestScript: string, testScript: string }
- Environment: { id, name, variables: [{ key, value, secret: boolean }] }
- ExecutionResult: { requestId, status, duration, responseHeaders, responseBody, testResults: [{ name, status, error }] }

FAILURE MODES TO HANDLE:
- Infinite loops or malicious code executed within JavaScript test scripts in the VM sandbox.
- Self-signed SSL certificates or local development URLs (http://localhost) failing in server-side proxy execution.
- Large JSON payloads (10MB+) freezing the UI tab or script runner.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs