Can I vibecode Bitwarden?

You are an expert full-stack developer and security engineer. Your task is to build a comprehensive, secure, and modern password manager web application that clones the core features of Bitwarden. The application must prioritize zero-knowledge encryption, cross-device synchronization, and seamless user experience.

### Core Architecture & Security Requirements:
1.  **Zero-Knowledge Encryption Strategy:**
    *   Implement end-to-end encryption using AES-256 for all stored data (passwords, notes, identities).
    *   Data must be encrypted and decrypted locally in the client browser using Web Crypto API.
    *   The server must *never* receive plaintext passwords or vault data. Master passwords should be hashed (e.g., using PBKDF2 or Argon2) on the client side before transmission for authentication.
2.  **Tech Stack:**
    *   Frontend: Next.js or React with TypeScript, using modern UI components (Tailwind CSS or similar) for a sleek, responsive design.
    *   Backend: Node.js/Express or a lightweight serverless architecture (e.g., Supabase, Firebase) for syncing encrypted data.
    *   Database: PostgreSQL or a similar robust SQL/NoSQL store to hold encrypted blobs.

### Key Features to Implement:
1.  **Authentication & User Management:**
    *   Secure signup and login using the master password.
    *   Support for Two-Factor Authentication (2FA) via Time-based One-Time Passwords (TOTP).
    *   Session management with secure HTTP-only cookies or short-lived JWTs.
2.  **Vault Management Dashboard:**
    *   A clean, intuitive interface to view, add, edit, and delete vault items.
    *   Categorization of items into: Logins, Secure Notes, Credit Cards, and Identities.
    *   Support for folders or collections to organize credentials.
3.  **Password Generator:**
    *   A highly configurable, built-in password generator that can create strong, random passwords.
    *   Options to include/exclude uppercase, lowercase, numbers, and special characters.
    *   Options for passphrase generation (e.g., word-based generation like "correct-horse-battery-staple").
4.  **Data Synchronization & Storage:**
    *   Real-time or near real-time sync across devices. When the client updates an item, it is encrypted and pushed to the backend database.
5.  **Import/Export Functionality:**
    *   Provide functionality to import credentials from standard CSV formats (like those generated by LastPass, Chrome, or 1Password).
    *   Allow users to export their encrypted vault data for backup purposes.

### Design & User Experience:
*   The UI should be premium, dynamic, and responsive, featuring a dark mode option by default to match modern developer aesthetics.
*   Ensure smooth transitions, micro-interactions, and clear visual feedback for actions (e.g., copying a password to the clipboard, successful save, encryption progress).
*   Prioritize accessibility (a11y) and keyboard navigation.

### Deliverables:
*   Complete source code for the frontend and backend.
*   A `README.md` containing detailed instructions on how to set up the development environment, configure environment variables (like database URLs and JWT secrets), and run the application locally.
*   A documented explanation of the encryption flow and how the zero-knowledge architecture is achieved.