Can I vibecode Simple Analytics?

Build me privacy-first web analytics to replace Simple Analytics, self-hosted for my own
sites. Requirements:

- A Node + Express service with better-sqlite3: one /collect endpoint and a dashboard at
  /dash behind basic auth (password in .env).
- A tracker snippet under 1 KB of plain JS, no cookies: sends path, referrer, screen
  width, and a daily-salted hash of IP + user agent for unique counting; the salt
  rotates daily so nothing is traceable across days.
- Keep raw hits 30 days; a nightly node-cron job aggregates into daily rollups per site
  (pageviews, uniques, top pages, top referrers, device split), keeps rollups forever,
  deletes expired raw hits.
- Custom events via sa('signup') in the snippet, counted per day.
- Dashboard per site: a 30-day chart (hand-rolled SVG, no chart library), pages and
  referrers tables, a date-range picker.
- Filter obvious bots by user-agent list; ignore my own visits via a localStorage opt-
  out flag.
- CSV export per site and month from the dashboard.
- No cookies and no personal data stored, GDPR-sane by construction.
- Out of scope: funnels, session replay, and multi-user access. Uptime is on me; the
  collect endpoint sits behind my existing reverse proxy.
- README: the snippet to paste and the Caddy or nginx route.