Can I vibe code Stamp Me?

Build a full-stack digital punch card loyalty web app using Next.js 14, Supabase (PostgreSQL + Auth), and Tailwind CSS. The system must support two user roles: Store Customer and Store Staff/Admin.

1. Data Model:
- Profiles: id, email, role (customer/staff/admin), store_id, created_at.
- StampCards: id, customer_id, current_stamps (default 0), target_stamps (default 10), completed_count, created_at, updated_at.
- Transactions: id, customer_id, staff_id, stamps_added, verification_type (qr_scan, pin_code, webhook), created_at.
- RewardVouchers: id, customer_id, voucher_code, status (active/redeemed/expired), created_at, redeemed_at.

2. Customer View:
- Mobile-first PWA layout displaying a digital punch card grid (e.g., 10 slots with visual stamp indicators).
- Dynamic QR Code generator modal containing a short-lived signed JWT encoding customer_id and timestamp (expires in 60 seconds).
- List of active generated RewardVouchers with claimable promo codes.

3. Staff/Admin View:
- Camera-based QR Code scanner page (using html5-qrcode library) that reads customer QR codes, validates the JWT, and increments current_stamps by 1.
- Fallback manual 4-digit Store PIN modal for staff to add stamps manually on customer devices.
- Trigger logic: When current_stamps reaching target_stamps, automatically reset current_stamps to 0, increment completed_count, and insert a unique coupon code into RewardVouchers.

4. Integration & Security:
- Expose a secure POST /api/webhooks/order-paid endpoint validating HMAC header from ecommerce platforms. Match customer email, add 1 stamp per completed order, and trigger voucher generation if target is reached.
- Implement Supabase Row Level Security (RLS) ensuring customers can only view their own cards and vouchers.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs