diff --git a/.kno/chunk_review.txt b/.kno/chunk_review.txt
new file mode 100644
index 00000000..ae92b31f
--- /dev/null
+++ b/.kno/chunk_review.txt
@@ -0,0 +1,1353 @@
+
+=== File: .gitignore ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/.gitignore:1-23
+# If you need to exclude files such as those generated by an IDE, use
+# $GIT_DIR/info/exclude or the core.excludesFile configuration variable as
+# described in https://git-scm.com/docs/gitignore
+
+.env
+*.egg-info
+*.pot
+*.py[co]
+.tox/
+db.sqlite3
+__pycache__
+MANIFEST
+dist/
+docs/_build/
+docs/locale/
+node_modules/
+tests/coverage_html/
+tests/.coverage
+build/
+tests/report/
+.DS_Store
+.vscode/
+virtualenv/
+
+=== File: requirements.txt ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/requirements.txt:1-5
+Django
+djangorestframework
+django-cors-headers
+ShopifyAPI>=8.4.0
+python-dotenv
+
+=== File: README.md ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/README.md:1-59
+# Sample Django App
+
+A demo app created using Django and ShopifyAPI `v8.4+`.
+
+## Quick start
+
+To run this app locally, you can clone the repository and do the following.
+
+1. Create a `.env` file to specify this app's `API key` and `API secret key` app credentials that can be found in the Shopify Partners dashboard.
+
+```ini
+SHOPIFY_API_KEY=<The API key app credential specified in the Shopify Partners dashboard>
+SHOPIFY_API_SECRET=<The API secret key app credential specified in the Shopify Partners dashboard>
+APP_URL=<The public app URL specified in the Shopify Partners dashboard>
+SCOPES=<Scopes needed for the app>
+```
+
+> __Note:__ It's recommended to follow along the tutorial _[Build a Shopify App with Node and React](https://shopify.dev/apps/getting-started/create#get-a-shopify-api-key)_ to understand how to retrieve the `API key` and `API secret key` app credentials.
+
+2. Run the following to install the required dependencies:
+
+```console
+$ pip install -r requirements.txt
+```
+
+3. Change directories to the main `sample_django_app` app and run all pending migrations:
+
+```console
+$ cd sample_django_app
+$ python manage.py migrate
+```
+
+4. Ensure ngrok is running on port `8000`:
+
+```console
+$ ngrok http 8000
+```
+
+5. In a new terminal, run the server:
+
+```console
+$ python manage.py runserver
+```
+
+6. Create an `APP_URL` environment variable based on the URL ngrok gives you. This is used in the `CSRF_TRUSTED_ORIGINS` and `ALLOWED_HOSTS` section of `settings.py`. Do not include a schema (http:// or https://) in this variable.
+
+```ini
+export APP_URL=<ngrok-url.ngrok.io>
+```
+
+7. From the Partner dashboard, update the "App URL" and "Allowed redirection URL(s)" to include the callback URL:
+
+```
+<https://ngrok-url.ngrok.io>/auth/shopify/callback
+```
+
+8. In your browser, open the `https` ngrok url to install and open this app on a shop. Requests to authenticated resources like the `products` view in the `api` app should now be secured with an `Authorization: Bearer <session token>` header.
+
+![](docs/images/app.png)
+
+=== File: sample_django_app/env.example ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/env.example:1-5
+SHOPIFY_API_KEY=
+SHOPIFY_API_SECRET=
+SHOP=store-name.myshopify.com
+SCOPES=write_products,write_customers,write_draft_orders
+HOST=
+
+=== File: sample_django_app/manage.py ===
+
+-- Chunk 1 --
+// manage.py:7-18
+def main():
+    """Run administrative tasks."""
+    os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'sample_django_app.settings')
+    try:
+        from django.core.management import execute_from_command_line
+    except ImportError as exc:
+        raise ImportError(
+            "Couldn't import Django. Are you sure it's installed and "
+            "available on your PYTHONPATH environment variable? Did you "
+            "forget to activate a virtual environment?"
+        ) from exc
+    execute_from_command_line(sys.argv)
+
+=== File: sample_django_app/shopify_app/admin.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/shopify_app/admin.py:1-3
+from django.contrib import admin
+
+# Register your models here.
+
+=== File: sample_django_app/shopify_app/__init__.py ===
+
+=== File: sample_django_app/shopify_app/apps.py ===
+
+-- Chunk 1 --
+// apps.py:5-12
+class ShopifyAppConfig(AppConfig):
+    name = 'shopify_app'
+
+    SHOPIFY_API_KEY = os.getenv('SHOPIFY_API_KEY')
+    SHOPIFY_API_SECRET = os.getenv('SHOPIFY_API_SECRET')
+    APP_URL = os.getenv('APP_URL')
+    SHOPIFY_API_VERSION = os.getenv('SHOPIFY_API_VERSION', 'unstable')
+    SHOPIFY_API_SCOPES = os.getenv('SHOPIFY_API_SCOPES', 'write_products,write_orders')
+
+=== File: sample_django_app/shopify_app/tests.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/shopify_app/tests.py:1-3
+from django.test import TestCase
+
+# Create your tests here.
+
+=== File: sample_django_app/shopify_app/models.py ===
+
+-- Chunk 1 --
+// models.py:4-17
+class Shop(models.Model):
+    shopify_domain = models.CharField(max_length=255)
+    shopify_token = models.CharField(max_length=255)
+    access_scopes = models.TextField()
+    created_at = models.DateTimeField(auto_now_add=True)
+    updated_at = models.DateTimeField(auto_now=True)
+
+    def __str__(self):
+        return "id: {id}, shop: {shop}, token: {token}, access_scopes: {access_scopes}".format(
+            id=self.pk,
+            shop=self.shopify_domain,
+            token=self.shopify_token,
+            access_scopes=self.access_scopes,
+        )
+
+=== File: sample_django_app/shopify_app/decorators.py ===
+
+-- Chunk 1 --
+// decorators.py:13-26
+def session_token_required(func):
+    def wrapper(*args, **kwargs):
+        try:
+            decoded_session_token = session_token.decode_from_header(
+                authorization_header=authorization_header(args[0]),
+                api_key=apps.get_app_config("shopify_app").SHOPIFY_API_KEY,
+                secret=apps.get_app_config("shopify_app").SHOPIFY_API_SECRET,
+            )
+            with shopify_session(decoded_session_token):
+                return func(*args, **kwargs)
+        except session_token.SessionTokenError:
+            return HttpResponse(status=401)
+
+    return wrapper
+
+-- Chunk 2 --
+// decorators.py:29-34
+def shopify_session(session_token):
+    shopify_domain = session_token.get("dest").removeprefix("https://")
+    api_version = apps.get_app_config("shopify_app").SHOPIFY_API_VERSION
+    access_token = Shop.objects.get(shopify_domain=shopify_domain).shopify_token
+
+    return Session.temp(shopify_domain, api_version, access_token)
+
+-- Chunk 3 --
+// decorators.py:37-38
+def authorization_header(request):
+    return request.META.get(HTTP_AUTHORIZATION_HEADER)
+
+-- Chunk 4 --
+// decorators.py:41-52
+def known_shop_required(func):
+    def wrapper(*args, **kwargs):
+        request = args[1]
+        try:
+            check_shop_domain(request, kwargs)
+            check_shop_known(request, kwargs)
+
+            return func(*args, **kwargs)
+        except:
+            return redirect(reverse("login"))
+
+    return wrapper
+
+-- Chunk 5 --
+// decorators.py:55-56
+def check_shop_domain(request, kwargs):
+    kwargs["shopify_domain"] = get_sanitized_shop_param(request)
+
+-- Chunk 6 --
+// decorators.py:59-60
+def check_shop_known(request, kwargs):
+    kwargs["shop"] = Shop.objects.get(shopify_domain=kwargs.get("shopify_domain"))
+
+-- Chunk 7 --
+// decorators.py:63-77
+def latest_access_scopes_required(func):
+    def wrapper(*args, **kwargs):
+        shop = kwargs.get("shop")
+
+        try:
+            configured_access_scopes = apps.get_app_config("shopify_app").SHOPIFY_API_SCOPES
+            current_access_scopes = shop.access_scopes
+
+            assert ApiAccess(configured_access_scopes) == ApiAccess(current_access_scopes)
+        except:
+            kwargs["scope_changes_required"] = True
+
+        return func(*args, **kwargs)
+
+    return wrapper
+
+=== File: sample_django_app/shopify_app/views.py ===
+
+-- Chunk 1 --
+// views.py:18-27
+class LoginView(View):
+    def get(self, request, *args, **kwargs):
+        if request.GET.get("shop"):
+            return authenticate(request)
+        return render(
+            request, "shopify_app/login.html", {"app_name": "Sample Django app"}
+        )
+
+    def post(self, request):
+        return authenticate(request)
+
+-- Chunk 2 --
+// views.py:30-44
+def callback(request):
+    params = request.GET.dict()
+    shop = params.get("shop")
+
+    try:
+        validate_params(request, params)
+        access_token, access_scopes = exchange_code_for_access_token(request, shop)
+        store_shop_information(access_token, access_scopes, shop)
+        after_authenticate_jobs(shop, access_token)
+    except ValueError as exception:
+        messages.error(request, str(exception))
+        return redirect(reverse("login"))
+
+    redirect_uri = build_callback_redirect_uri(request, params)
+    return redirect(redirect_uri)
+
+-- Chunk 3 --
+// views.py:48-52
+def uninstall(request):
+    uninstall_data = json.loads(request.body)
+    shop = uninstall_data.get("domain")
+    Shop.objects.filter(shopify_domain=shop).delete()
+    return HttpResponse(status=204)
+
+-- Chunk 4 --
+// views.py:58-69
+def authenticate(request):
+    try:
+        shop = get_sanitized_shop_param(request)
+        scopes, redirect_uri, state = build_auth_params(request)
+        store_state_param(request, state)
+        permission_url = _new_session(shop).create_permission_url(
+            scopes, redirect_uri, state
+        )
+        return redirect(permission_url)
+    except ValueError as exception:
+        messages.error(request, str(exception))
+        return redirect(reverse("login"))
+
+-- Chunk 5 --
+// views.py:72-78
+def get_sanitized_shop_param(request):
+    sanitized_shop_domain = shop_url.sanitize_shop_domain(
+        request.GET.get("shop", request.POST.get("shop"))
+    )
+    if not sanitized_shop_domain:
+        raise ValueError("Shop must match 'example.myshopify.com'")
+    return sanitized_shop_domain
+
+-- Chunk 6 --
+// views.py:81-86
+def build_auth_params(request):
+    scopes = get_configured_scopes()
+    redirect_uri = build_redirect_uri()
+    state = build_state_param()
+
+    return scopes, redirect_uri, state
+
+-- Chunk 7 --
+// views.py:89-90
+def get_configured_scopes():
+    return apps.get_app_config("shopify_app").SHOPIFY_API_SCOPES.split(",")
+
+-- Chunk 8 --
+// views.py:93-98
+def build_redirect_uri():
+    app_url = apps.get_app_config("shopify_app").APP_URL
+    callback_path = reverse("callback")
+    return "https://{app_url}{callback_path}".format(
+        app_url=app_url, callback_path=callback_path
+    )
+
+-- Chunk 9 --
+// views.py:101-102
+def build_state_param():
+    return binascii.b2a_hex(os.urandom(15)).decode("utf-8")
+
+-- Chunk 10 --
+// views.py:105-106
+def store_state_param(request, state):
+    request.session["shopify_oauth_state_param"] = state
+
+-- Chunk 11 --
+// views.py:109-115
+def _new_session(shop_url):
+    shopify_api_version = apps.get_app_config("shopify_app").SHOPIFY_API_VERSION
+    shopify_api_key = apps.get_app_config("shopify_app").SHOPIFY_API_KEY
+    shopify_api_secret = apps.get_app_config("shopify_app").SHOPIFY_API_SECRET
+
+    shopify.Session.setup(api_key=shopify_api_key, secret=shopify_api_secret)
+    return shopify.Session(shop_url, shopify_api_version)
+
+-- Chunk 12 --
+// views.py:121-124
+def validate_params(request, params):
+    validate_state_param(request, params.get("state"))
+    if not shopify.Session.validate_params(params):  # Validates HMAC
+        raise ValueError("Invalid callback parameters")
+
+-- Chunk 13 --
+// views.py:127-131
+def validate_state_param(request, state):
+    if request.session.get("shopify_oauth_state_param") != state:
+        raise ValueError("Anti-forgery state parameter does not match")
+
+    request.session.pop("shopify_oauth_state_param", None)
+
+-- Chunk 14 --
+// views.py:134-139
+def exchange_code_for_access_token(request, shop):
+    session = _new_session(shop)
+    access_token = session.request_token(request.GET)
+    access_scopes = session.access_scopes
+
+    return access_token, access_scopes
+
+-- Chunk 15 --
+// views.py:142-147
+def store_shop_information(access_token, access_scopes, shop):
+    shop_record = Shop.objects.get_or_create(shopify_domain=shop)[0]
+    shop_record.shopify_token = access_token
+    shop_record.access_scopes = access_scopes
+
+    shop_record.save()
+
+-- Chunk 16 --
+// views.py:150-152
+def build_callback_redirect_uri(request, params):
+    base = request.session.get("return_to", reverse("root_path"))
+    return "{base}?shop={shop}".format(base=base, shop=params.get("shop"))
+
+-- Chunk 17 --
+// views.py:158-159
+def after_authenticate_jobs(shop, access_token):
+    create_uninstall_webhook(shop, access_token)
+
+-- Chunk 18 --
+// views.py:162-169
+def create_uninstall_webhook(shop, access_token):
+    with shopify_session(shop, access_token):
+        app_url = apps.get_app_config("shopify_app").APP_URL
+        webhook = shopify.Webhook()
+        webhook.topic = "app/uninstalled"
+        webhook.address = "https://{host}/uninstall".format(host=app_url)
+        webhook.format = "json"
+        webhook.save()
+
+-- Chunk 19 --
+// views.py:172-175
+def shopify_session(shopify_domain, access_token):
+    api_version = apps.get_app_config("shopify_app").SHOPIFY_API_VERSION
+
+    return shopify.Session.temp(shopify_domain, api_version, access_token)
+
+=== File: sample_django_app/shopify_app/urls.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/shopify_app/urls.py:1-6
+from django.urls import path
+
+from . import views
+
+urlpatterns = [
+]
+
+=== File: sample_django_app/api/admin.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/api/admin.py:1-3
+from django.contrib import admin
+
+# Register your models here.
+
+=== File: sample_django_app/api/__init__.py ===
+
+=== File: sample_django_app/api/apps.py ===
+
+-- Chunk 1 --
+// apps.py:4-5
+class ApiConfig(AppConfig):
+    name = 'api'
+
+=== File: sample_django_app/api/tests.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/api/tests.py:1-3
+from django.test import TestCase
+
+# Create your tests here.
+
+=== File: sample_django_app/api/models.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/api/models.py:1-3
+from django.db import models
+
+# Create your models here.
+
+=== File: sample_django_app/api/views.py ===
+
+-- Chunk 1 --
+// views.py:8-11
+def products(request):
+    products = shopify.Product.find()
+
+    return JsonResponse({'products': [p.to_dict() for p in products]})
+
+-- Chunk 2 --
+// views.py:14-17
+def orders(request):
+    orders = shopify.Order.find(status='any')
+
+    return JsonResponse({'orders': [o.to_dict() for o in orders]})
+
+=== File: sample_django_app/api/urls.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/api/urls.py:1-8
+from django.urls import path
+
+from . import views
+
+urlpatterns = [
+  path("products/", views.products, name="products"),
+  path("orders/", views.orders, name="orders")
+]
+
+=== File: sample_django_app/sample_django_app/asgi.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/sample_django_app/asgi.py:1-16
+"""
+ASGI config for sample_django_app project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/3.1/howto/deployment/asgi/
+"""
+
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'sample_django_app.settings')
+
+application = get_asgi_application()
+
+=== File: sample_django_app/sample_django_app/__init__.py ===
+
+=== File: sample_django_app/sample_django_app/wsgi.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/sample_django_app/wsgi.py:1-16
+"""
+WSGI config for sample_django_app project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/3.1/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'sample_django_app.settings')
+
+application = get_wsgi_application()
+
+=== File: sample_django_app/sample_django_app/urls.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/sample_django_app/urls.py:1-29
+"""sample_django_app URL Configuration
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+    https://docs.djangoproject.com/en/3.1/topics/http/urls/
+Examples:
+Function views
+    1. Add an import:  from my_app import views
+    2. Add a URL to urlpatterns:  path('', views.home, name='home')
+Class-based views
+    1. Add an import:  from other_app.views import Home
+    2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
+Including another URLconf
+    1. Import the include() function: from django.urls import include, path
+    2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
+"""
+from django.contrib import admin
+from django.urls import include, path
+
+from shopify_app.views import  callback, LoginView, uninstall
+from home.views import HomeView
+
+urlpatterns = [
+    path('admin/', admin.site.urls),
+    path('', HomeView.as_view(), name='root_path'),
+    path('api/', include('api.urls')),
+    path('login/', LoginView.as_view(), name='login'),
+    path('auth/shopify/callback', callback, name='callback'),
+    path('uninstall', uninstall, name='uninstall'),
+]
+
+=== File: sample_django_app/sample_django_app/settings.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/sample_django_app/settings.py:1-138
+"""
+Django settings for sample_django_app project.
+
+Generated by 'django-admin startproject' using Django 3.1.7.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/3.1/topics/settings/
+
+For the full list of settings and their values, see
+https://docs.djangoproject.com/en/3.1/ref/settings/
+"""
+
+from pathlib import Path
+from dotenv import load_dotenv
+import os
+
+load_dotenv()
+
+# Build paths inside the project like this: BASE_DIR / 'subdir'.
+BASE_DIR = Path(__file__).resolve().parent.parent
+
+
+# Quick-start development settings - unsuitable for production
+# See https://docs.djangoproject.com/en/3.1/howto/deployment/checklist/
+
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = '=y4jnr$*8&jo2$ako6zea2uxar&*re%)otb3@d@=12ao1ca5=o'
+
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = True
+
+# The values in here MUST NOT start with a schema (http://, https://, etc.)
+ALLOWED_HOSTS = [
+    os.getenv('APP_URL'),
+]
+
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_ALLOW_CREDENTIALS = True
+
+# As of Django 4.0, the values in the CSRF_TRUSTED_ORIGINS setting must start with a scheme.
+# The values in here MUST start with a schema (http://, https://, etc.)
+CSRF_TRUSTED_ORIGINS = [
+    "https://" + os.getenv('APP_URL'),
+]
+
+# Application definition
+
+INSTALLED_APPS = [
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+    'shopify_app.apps.ShopifyAppConfig',
+    'home',
+    'api',
+]
+
+MIDDLEWARE = [
+    'django.middleware.security.SecurityMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+]
+
+ROOT_URLCONF = 'sample_django_app.urls'
+
+TEMPLATES = [
+    {
+        'BACKEND': 'django.template.backends.django.DjangoTemplates',
+        'DIRS': [],
+        'APP_DIRS': True,
+        'OPTIONS': {
+            'context_processors': [
+                'django.template.context_processors.debug',
+                'django.template.context_processors.request',
+                'django.contrib.auth.context_processors.auth',
+                'django.contrib.messages.context_processors.messages',
+            ],
+        },
+    },
+]
+
+WSGI_APPLICATION = 'sample_django_app.wsgi.application'
+
+
+# Database
+# https://docs.djangoproject.com/en/3.1/ref/settings/#databases
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': BASE_DIR / 'db.sqlite3',
+    }
+}
+
+
+# Password validation
+# https://docs.djangoproject.com/en/3.1/ref/settings/#auth-password-validators
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
+    },
+]
+
+
+# Internationalization
+# https://docs.djangoproject.com/en/3.1/topics/i18n/
+
+LANGUAGE_CODE = 'en-us'
+
+TIME_ZONE = 'UTC'
+
+USE_I18N = True
+
+USE_L10N = True
+
+USE_TZ = True
+
+
+# Static files (CSS, JavaScript, Images)
+# https://docs.djangoproject.com/en/3.1/howto/static-files/
+
+STATIC_URL = '/static/'
+
+=== File: sample_django_app/home/admin.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/home/admin.py:1-3
+from django.contrib import admin
+
+# Register your models here.
+
+=== File: sample_django_app/home/__init__.py ===
+
+=== File: sample_django_app/home/apps.py ===
+
+-- Chunk 1 --
+// apps.py:4-5
+class HomeConfig(AppConfig):
+    name = 'home'
+
+=== File: sample_django_app/home/tests.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/home/tests.py:1-3
+from django.test import TestCase
+
+# Create your tests here.
+
+=== File: sample_django_app/home/models.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/home/models.py:1-3
+from django.db import models
+
+# Create your models here.
+
+=== File: sample_django_app/home/views.py ===
+
+-- Chunk 1 --
+// views.py:9-19
+class HomeView(View):
+    @xframe_options_exempt
+    @known_shop_required
+    @latest_access_scopes_required
+    def get(self, request, *args, **kwargs):
+        context = {
+            "shop_origin": kwargs.get("shopify_domain"),
+            "api_key": apps.get_app_config("shopify_app").SHOPIFY_API_KEY,
+            "scope_changes_required": kwargs.get("scope_changes_required"),
+        }
+        return render(request, "home/index.html", context)
+
+=== File: sample_django_app/home/urls.py ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/home/urls.py:1-5
+from django.urls import path
+
+from . import views
+
+urlpatterns = []
+
+=== File: sample_django_app/shopify_app/migrations/__init__.py ===
+
+=== File: sample_django_app/shopify_app/migrations/0001_initial.py ===
+
+-- Chunk 1 --
+// 0001_initial.py:6-25
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Shop',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('shopify_domain', models.CharField(max_length=255)),
+                ('shopify_token', models.CharField(max_length=255)),
+                ('access_scopes', models.TextField()),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+            ],
+        ),
+    ]
+
+=== File: sample_django_app/shopify_app/static/shopify_app/style.css ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/shopify_app/static/shopify_app/style.css:1-150
+html, body {
+    min-height:100%;
+    height:100%;
+    font-size:1.5rem;
+    font-weight:400;
+    line-height:2rem;
+    text-transform:initial;
+    letter-spacing:initial;
+    font-weight:400;
+    color:#212b36;
+    font-family:-apple-system, BlinkMacSystemFont, San Francisco, Roboto, Segoe UI, Helvetica Neue, sans-serif;
+}
+@media (min-width: 40em) {
+    html, body {
+        font-size:1.4rem;
+   }
+}
+html {
+    position:relative;
+    font-size:62.5%;
+    -webkit-font-smoothing:antialiased;
+    -moz-osx-font-smoothing:grayscale;
+    -webkit-text-size-adjust:100%;
+    -ms-text-size-adjust:100%;
+    text-size-adjust:100%;
+    text-rendering:optimizeLegibility;
+}
+body {
+    min-height:100%;
+    margin:0;
+    padding:0;
+    background-color:#f6f6f7;
+}
+*, *::before, *::after{
+    box-sizing:border-box;
+}
+h1, h2, h3, h4, h5, h6, p {
+    margin:0;
+    font-size:1em;
+    font-weight:400;
+}
+.Polaris-Page {
+    margin:0 auto;
+    padding:0;
+    max-width:99.8rem;
+}
+.Polaris-Page--InstallApp {
+    max-width: 70rem;
+}
+@media (min-width: 30.625em) {
+    .Polaris-Page {
+        padding:0 2rem;
+   }
+}
+@media (min-width: 46.5em) {
+    .Polaris-Page {
+        padding:0 3.2rem;
+   }
+}
+.Polaris-Page__Content {
+    width: 100%;
+    margin:2rem 0;
+}
+@media (min-width: 46.5em) {
+    .Polaris-Page__Content {
+        margin-top:2rem;
+   }
+}
+@media (min-width: 46.5em) {
+    .Polaris-Page {
+        display: flex;
+        justify-content: center;
+        align-items: center;
+        height: 100vh;
+   }
+}
+.Polaris-Layout {
+    display:-webkit-box;
+    display:-ms-flexbox;
+    display:flex;
+    -ms-flex-wrap:wrap;
+    flex-wrap:wrap;
+    -webkit-box-pack:center;
+    -ms-flex-pack:center;
+    justify-content:center;
+    -webkit-box-align:start;
+    -ms-flex-align:start;
+    align-items:flex-start;
+    margin-top:-2rem;
+    margin-left:-2rem;
+}
+.Polaris-Layout__Section {
+    -webkit-box-flex:2;
+    -ms-flex:2 2 48rem;
+    flex:2 2 48rem;
+    min-width:51%;
+}
+.Polaris-Layout__Section--fullWidth {
+    -webkit-box-flex:1;
+    -ms-flex:1 1 100%;
+    flex:1 1 100%;
+}
+.Polaris-Layout__Section {
+    max-width:calc(100% - 2rem);
+    margin-top:2rem;
+    margin-left:2rem;
+}
+.Polaris-Stack {
+    margin-top:-1.6rem;
+    margin-left:-1.6rem;
+    display:-webkit-box;
+    display:-ms-flexbox;
+    display:flex;
+    -ms-flex-wrap:wrap;
+    flex-wrap:wrap;
+    -webkit-box-align:stretch;
+    -ms-flex-align:stretch;
+    align-items:stretch;
+}
+.Polaris-Stack > .Polaris-Stack__Item {
+    margin-top:1.6rem;
+    margin-left:1.6rem;
+    max-width:calc(100% - 1.6rem);
+}
+.Polaris-Stack__Item {
+    -webkit-box-flex:0;
+    -ms-flex:0 0 auto;
+    flex:0 0 auto;
+    min-width:0;
+}
+.Polaris-Stack--distributionTrailing {
+    -webkit-box-pack:end;
+    -ms-flex-pack:end;
+    justify-content:flex-end;
+}
+.Polaris-Stack--distributionTrailingCustomSpacing {
+    margin-right:2rem;
+}
+@media (min-width: 30.625em) {
+    .Polaris-Stack--distributionTrailingCustomSpacing {
+        margin-right:0;
+   }
+}
+.Polaris-Stack--vertical {
+    -webkit-box-orient:vertical;
+    -webkit-box-direction:normal;
+    -ms-flex-direction:column;
+    flex-direction:column;
+}
+.Polaris-Card {
+
+-- Chunk 2 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/shopify_app/static/shopify_app/style.css:151-300
+    overflow:hidden;
+    background-color:white;
+    box-shadow:0 0 0 1px rgba(63, 63, 68, 0.05), 0 1px 3px 0 rgba(63, 63, 68, 0.15);
+}
+.Polaris-Card + .Polaris-Card {
+    margin-top:2rem;
+}
+@media (min-width: 30.625em) {
+    .Polaris-Card {
+        border-radius:8px;
+   }
+}
+.Polaris-Card__Header {
+    padding:2rem 2rem 0;
+}
+.Polaris-Card__Section {
+    padding:2rem;
+}
+.Polaris-Card__Section + .Polaris-Card__Section {
+    border-top:.1rem solid #e4e5e7;
+}
+.Polaris-Card__Section--subdued {
+    background-color:#fafbfb;
+}
+.Polaris-Button {
+    position:relative;
+    display:-webkit-inline-box;
+    display:-ms-inline-flexbox;
+    display:inline-flex;
+    -webkit-box-align:center;
+    -ms-flex-align:center;
+    align-items:center;
+    -webkit-box-pack:center;
+    -ms-flex-pack:center;
+    justify-content:center;
+    min-height:3.6rem;
+    min-width:3.6rem;
+    margin:0;
+    padding:0.7rem 1.6rem;
+    background-color:#ffffff;
+    border:1px solid #babfc3;
+    border-top-color: #c9cccf;
+    border-bottom-color: #babfc4;
+    box-shadow:0 1px 0 0 rgba(0, 0, 0, 0.05);
+    border-radius:4px;
+    line-height:1;
+    color:#202223;
+    text-align:center;
+    cursor:pointer;
+    -webkit-user-select:none;
+    -moz-user-select:none;
+    -ms-user-select:none;
+    user-select:none;
+    text-decoration:none;
+    transition-property:background, border, box-shadow;
+    transition-duration:100ms;
+    transition-timing-function:cubic-bezier(0.64, 0, 0.35, 1);
+}
+.Polaris-Button:hover {
+    background-color:#f6f6f7;
+}
+.Polaris-Button:focus {
+    outline:0;
+}
+.Polaris-Button:focus:after {
+    box-shadow:0 0 0 .2rem #448fff;
+}
+.Polaris-Button:after {
+    content:'';
+    position:absolute;
+    z-index:1;
+    top:-.2rem;
+    right:-.2rem;
+    bottom:-.2rem;
+    left:-.2rem;
+    display:block;
+    pointer-events:none;
+    box-shadow:0 0 0 -.2rem #448fff;
+    transition:box-shadow 100ms cubic-bezier(0.64, 0, 0.35, 1);
+    border-radius:5px;
+}
+.Polaris-Button:active {
+    background-color:#f1f2f3);
+}
+.Polaris-Button__Content {
+    font-size:1.4rem;
+    font-weight:500;
+    line-height:1.6rem;
+    text-transform:initial;
+    letter-spacing:initial;
+    position:relative;
+    display:-webkit-box;
+    display:-ms-flexbox;
+    display:flex;
+    -webkit-box-pack:center;
+    -ms-flex-pack:center;
+    justify-content:center;
+    -webkit-box-align:center;
+    -ms-flex-align:center;
+    align-items:center;
+    min-width:1px;
+    min-height:1px;
+}
+.Polaris-Button--primary {
+    background-color:#008060;
+    border-color:transparent;
+    border-width:0;
+    color:white;
+}
+.Polaris-Button--primary:hover {
+    background-color:#006e52;
+    border-color:transparent;
+    color:white;
+}
+.Polaris-Button--primary:active {
+    background-color:#005e46;
+    border-color:transparent;
+}
+.Polaris-Button--sizeLarge {
+    padding:1.1rem 2.4rem;
+}
+.Polaris-Heading {
+    font-size:1.7rem;
+    font-weight:600;
+    line-height:2.4rem;
+    margin:0;
+}
+@media (min-width: 40em) {
+    .Polaris-Heading {
+        font-size:1.6rem;
+   }
+}
+.Polaris-DisplayText {
+    margin:0;
+}
+.Polaris-DisplayText--sizeSmall {
+    font-size:1.6rem;
+    font-weight:400;
+    line-height:2.4rem;
+}
+@media (min-width: 40em) {
+    .Polaris-DisplayText--sizeSmall {
+        font-size:2rem;
+        line-height:2.8rem;
+   }
+}
+.Polaris-TextContainer > * + * {
+    margin-top:1.6rem;
+}
+.Polaris-Label {
+
+-- Chunk 3 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/shopify_app/static/shopify_app/style.css:301-345
+    margin-bottom:.4rem;
+}
+.Polaris-Label__Text {
+    -webkit-tap-highlight-color:transparent;
+}
+.Polaris-TextField {
+    position:relative;
+    margin-bottom:1.6rem;
+}
+.Polaris-TextField--InlineError {
+    margin-bottom:.4rem;
+}
+.Polaris-TextField__Input {
+    width:100%;
+    padding:.5rem 1.2rem;
+    border:1px solid #c9cccf;
+    border-top-color:#aeb4b9;
+    border-radius:4px;
+    box-shadow:none;
+    line-height:2.4rem;
+}
+.Polaris-TextField__Input:focus {
+    outline:none;
+}
+.Polaris-TextField__Backdrop:after {
+    content:'';
+    position:absolute;
+    z-index:1;
+    top:-.2rem;
+    right:-.2rem;
+    bottom:-.2rem;
+    left:-.2rem;
+    display:block;
+    pointer-events:none;
+    box-shadow:0 0 0 -.2rem #448fff;
+    transition:box-shadow .1s cubic-bezier(0.64, 0, 0.35, 1);
+    border-radius:5px;
+}
+.Polaris-TextField__Input:focus~.Polaris-TextField__Backdrop:after {
+    box-shadow:0 0 0 .2rem #448fff;
+}
+.Polaris-InlineError {
+    color:#d72c0d;
+    margin-bottom:1.6rem;
+}
+
+=== File: sample_django_app/shopify_app/templates/shopify_app/login.html ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/shopify_app/templates/shopify_app/login.html:1-56
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+  <title>Shopify App — Installation</title>
+
+  {% load static %}
+
+  <meta http-equiv="x-ua-compatible" content="ie=edge">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <link rel="stylesheet" href="https://unpkg.com/@shopify/polaris@6.1.0/dist/styles.css" />
+  <link rel="stylesheet" type="text/css" href="{% static 'shopify_app/style.css' %}">
+</head>
+
+<body>
+  <main class="container" role="main">
+    <div class="Polaris-Page Polaris-Page--InstallApp">
+      <div class="Polaris-Page__Content">
+        <div class="Polaris-Layout">
+          <div class="Polaris-Layout__Section">
+            <div class="Polaris-Card">
+              <div class="Polaris-Card__Header">
+                <h1 class="Polaris-Heading">
+                  {{ app_name|default:"Sample App - Installation" }}
+                </h1>
+              </div>
+              <div class="Polaris-Card__Section">
+                <form action="{% url 'login' %}" method="post">{% csrf_token %}
+                  <div class="Polaris-Label">
+                    <label class="Polaris-Label__Text" for='shop'>Enter your shop domain to log in
+                      or install this app.</strong> </label>
+                  </div>
+
+                  <div class="Polaris-TextField{% if messages %} Polaris-TextField--InlineError{% endif %}">
+                    <input id="shop" name="shop" type="text" autofocus="autofocus" placeholder="example.myshopify.com"
+                      class="Polaris-TextField__Input">
+                  </div>
+                  {% if messages %}
+                  {% for message in messages %}
+                  <div class="Polaris-InlineError">{{ message }}</div>
+                  {% endfor %}
+                  {% endif %}
+                  <button type="submit" class="Polaris-Button Polaris-Button--primary Polaris-Button--sizeLarge">
+                    <span class="Polaris-Button__Content"><span>Install app</span>
+                  </button>
+                </form>
+              </div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  </main>
+</body>
+
+</html>
+
+=== File: sample_django_app/api/migrations/__init__.py ===
+
+=== File: sample_django_app/home/migrations/__init__.py ===
+
+=== File: sample_django_app/home/templates/home/index.html ===
+
+-- Chunk 1 --
+// /app/repos/repo_8/repos/repo_0/repos/repo_0/repos/repo_0/sample_django_app/home/templates/home/index.html:1-121
+<!doctype html>
+
+<head>
+  <title>Sample Django App</title>
+  <script src="https://unpkg.com/@shopify/app-bridge"></script>
+  <script src="https://unpkg.com/@shopify/app-bridge-utils"></script>
+  <link rel="stylesheet" href="https://unpkg.com/@shopify/polaris@6.1.0/dist/styles.css" />
+  <script>
+    var AppBridge = window['app-bridge'];
+    var AppBridgeUtils = window['app-bridge-utils'];
+    var actions = AppBridge.actions;
+    var createApp = AppBridge.default;
+    var TitleBar = actions.TitleBar;
+    var app = createApp({
+      apiKey: '{{ api_key }}',
+      shopOrigin: '{{ shop_origin }}'
+    });
+    var myTitleBar = TitleBar.create(app, { title: 'Hello' });
+    var shopifyAuthenticatedFetch = AppBridgeUtils.authenticatedFetch(app);
+    var redirect = actions.Redirect.create(app);
+
+    function topLevelRedirectToLogin() {
+      redirect.dispatch(actions.Redirect.Action.REMOTE, `${app.localOrigin}/login?shop={{ shop_origin }}`);
+    }
+
+    function getProducts() {
+      shopifyAuthenticatedFetch('/api/products').then(async (res) => {
+        var products = (await res.json())['products'];
+        var productListElement = window.document.querySelector('#product-list');
+
+        for (var i = 0, len = products.length; i < len; i++) {
+          var newLi = document.createElement('li');
+          newLi.textContent = products[i]['title']
+          productListElement.appendChild(newLi);
+        }
+      });
+    }
+    function getOrders() {
+      shopifyAuthenticatedFetch('/api/orders').then(async (res) => {
+        var orders = (await res.json())['orders'];
+        var orderListElement = window.document.querySelector('#order-list');
+
+        for (var i = 0, len = orders.length; i < len; i++) {
+          var newLi = document.createElement('li');
+          console.log(orders[i]['line_items'])
+          newLi.textContent = orders[i]['line_items'][0]['price']
+          orderListElement.appendChild(newLi);
+        }
+      });
+    }
+  </script>
+</head>
+
+<body>
+
+  <!-- Temporary Polaris workaround: https://polaris.shopify.com/components/get-started#navigation -->
+  <div style="background-color: rgb(246, 246, 247); color: rgb(32, 34, 35); --p-background:rgba(246, 246, 247, 1); --p-background-hovered:rgba(241, 242, 243, 1); --p-background-pressed:rgba(237, 238, 239, 1); --p-background-selected:rgba(237, 238, 239, 1); --p-surface:rgba(255, 255, 255, 1); --p-surface-neutral:rgba(228, 229, 231, 1); --p-surface-neutral-hovered:rgba(219, 221, 223, 1); --p-surface-neutral-pressed:rgba(201, 204, 208, 1); --p-surface-neutral-disabled:rgba(241, 242, 243, 1); --p-surface-neutral-subdued:rgba(246, 246, 247, 1); --p-surface-subdued:rgba(250, 251, 251, 1); --p-surface-disabled:rgba(250, 251, 251, 1); --p-surface-hovered:rgba(246, 246, 247, 1); --p-surface-pressed:rgba(241, 242, 243, 1); --p-surface-depressed:rgba(237, 238, 239, 1); --p-backdrop:rgba(0, 0, 0, 0.5); --p-overlay:rgba(255, 255, 255, 0.5); --p-shadow-from-dim-light:rgba(0, 0, 0, 0.2); --p-shadow-from-ambient-light:rgba(23, 24, 24, 0.05); --p-shadow-from-direct-light:rgba(0, 0, 0, 0.15); --p-hint-from-direct-light:rgba(0, 0, 0, 0.15); --p-on-surface-background:rgba(241, 242, 243, 1); --p-border:rgba(140, 145, 150, 1); --p-border-neutral-subdued:rgba(186, 191, 195, 1); --p-border-hovered:rgba(153, 158, 164, 1); --p-border-disabled:rgba(210, 213, 216, 1); --p-border-subdued:rgba(201, 204, 207, 1); --p-border-depressed:rgba(87, 89, 89, 1); --p-border-shadow:rgba(174, 180, 185, 1); --p-border-shadow-subdued:rgba(186, 191, 196, 1); --p-divider:rgba(225, 227, 229, 1); --p-icon:rgba(92, 95, 98, 1); --p-icon-hovered:rgba(26, 28, 29, 1); --p-icon-pressed:rgba(68, 71, 74, 1); --p-icon-disabled:rgba(186, 190, 195, 1); --p-icon-subdued:rgba(140, 145, 150, 1); --p-text:rgba(32, 34, 35, 1); --p-text-disabled:rgba(140, 145, 150, 1); --p-text-subdued:rgba(109, 113, 117, 1); --p-interactive:rgba(44, 110, 203, 1); --p-interactive-disabled:rgba(189, 193, 204, 1); --p-interactive-hovered:rgba(31, 81, 153, 1); --p-interactive-pressed:rgba(16, 50, 98, 1); --p-focused:rgba(69, 143, 255, 1); --p-surface-selected:rgba(242, 247, 254, 1); --p-surface-selected-hovered:rgba(237, 244, 254, 1); --p-surface-selected-pressed:rgba(229, 239, 253, 1); --p-icon-on-interactive:rgba(255, 255, 255, 1); --p-text-on-interactive:rgba(255, 255, 255, 1); --p-action-secondary:rgba(255, 255, 255, 1); --p-action-secondary-disabled:rgba(255, 255, 255, 1); --p-action-secondary-hovered:rgba(246, 246, 247, 1); --p-action-secondary-pressed:rgba(241, 242, 243, 1); --p-action-secondary-depressed:rgba(109, 113, 117, 1); --p-action-primary:rgba(0, 128, 96, 1); --p-action-primary-disabled:rgba(241, 241, 241, 1); --p-action-primary-hovered:rgba(0, 110, 82, 1); --p-action-primary-pressed:rgba(0, 94, 70, 1); --p-action-primary-depressed:rgba(0, 61, 44, 1); --p-icon-on-primary:rgba(255, 255, 255, 1); --p-text-on-primary:rgba(255, 255, 255, 1); --p-text-primary:rgba(0, 123, 92, 1); --p-text-primary-hovered:rgba(0, 108, 80, 1); --p-text-primary-pressed:rgba(0, 92, 68, 1); --p-surface-primary-selected:rgba(241, 248, 245, 1); --p-surface-primary-selected-hovered:rgba(179, 208, 195, 1); --p-surface-primary-selected-pressed:rgba(162, 188, 176, 1); --p-border-critical:rgba(253, 87, 73, 1); --p-border-critical-subdued:rgba(224, 179, 178, 1); --p-border-critical-disabled:rgba(255, 167, 163, 1); --p-icon-critical:rgba(215, 44, 13, 1); --p-surface-critical:rgba(254, 211, 209, 1); --p-surface-critical-subdued:rgba(255, 244, 244, 1); --p-surface-critical-subdued-hovered:rgba(255, 240, 240, 1); --p-surface-critical-subdued-pressed:rgba(255, 233, 232, 1); --p-surface-critical-subdued-depressed:rgba(254, 188, 185, 1); --p-text-critical:rgba(215, 44, 13, 1); --p-action-critical:rgba(216, 44, 13, 1); --p-action-critical-disabled:rgba(241, 241, 241, 1); --p-action-critical-hovered:rgba(188, 34, 0, 1); --p-action-critical-pressed:rgba(162, 27, 0, 1); --p-action-critical-depressed:rgba(108, 15, 0, 1); --p-icon-on-critical:rgba(255, 255, 255, 1); --p-text-on-critical:rgba(255, 255, 255, 1); --p-interactive-critical:rgba(216, 44, 13, 1); --p-interactive-critical-disabled:rgba(253, 147, 141, 1); --p-interactive-critical-hovered:rgba(205, 41, 12, 1); --p-interactive-critical-pressed:rgba(103, 15, 3, 1); --p-border-warning:rgba(185, 137, 0, 1); --p-border-warning-subdued:rgba(225, 184, 120, 1); --p-icon-warning:rgba(185, 137, 0, 1); --p-surface-warning:rgba(255, 215, 157, 1); --p-surface-warning-subdued:rgba(255, 245, 234, 1); --p-surface-warning-subdued-hovered:rgba(255, 242, 226, 1); --p-surface-warning-subdued-pressed:rgba(255, 235, 211, 1); --p-text-warning:rgba(145, 106, 0, 1); --p-border-highlight:rgba(68, 157, 167, 1); --p-border-highlight-subdued:rgba(152, 198, 205, 1); --p-icon-highlight:rgba(0, 160, 172, 1); --p-surface-highlight:rgba(164, 232, 242, 1); --p-surface-highlight-subdued:rgba(235, 249, 252, 1); --p-surface-highlight-subdued-hovered:rgba(228, 247, 250, 1); --p-surface-highlight-subdued-pressed:rgba(213, 243, 248, 1); --p-text-highlight:rgba(52, 124, 132, 1); --p-border-success:rgba(0, 164, 124, 1); --p-border-success-subdued:rgba(149, 201, 180, 1); --p-icon-success:rgba(0, 127, 95, 1); --p-surface-success:rgba(174, 233, 209, 1); --p-surface-success-subdued:rgba(241, 248, 245, 1); --p-surface-success-subdued-hovered:rgba(236, 246, 241, 1); --p-surface-success-subdued-pressed:rgba(226, 241, 234, 1); --p-text-success:rgba(0, 128, 96, 1); --p-decorative-one-icon:rgba(126, 87, 0, 1); --p-decorative-one-surface:rgba(255, 201, 107, 1); --p-decorative-one-text:rgba(61, 40, 0, 1); --p-decorative-two-icon:rgba(175, 41, 78, 1); --p-decorative-two-surface:rgba(255, 196, 176, 1); --p-decorative-two-text:rgba(73, 11, 28, 1); --p-decorative-three-icon:rgba(0, 109, 65, 1); --p-decorative-three-surface:rgba(146, 230, 181, 1); --p-decorative-three-text:rgba(0, 47, 25, 1); --p-decorative-four-icon:rgba(0, 106, 104, 1); --p-decorative-four-surface:rgba(145, 224, 214, 1); --p-decorative-four-text:rgba(0, 45, 45, 1); --p-decorative-five-icon:rgba(174, 43, 76, 1); --p-decorative-five-surface:rgba(253, 201, 208, 1); --p-decorative-five-text:rgba(79, 14, 31, 1); --p-border-radius-base:0.4rem; --p-border-radius-wide:0.8rem; --p-border-radius-full:50%; --p-card-shadow:0px 0px 5px var(--p-shadow-from-ambient-light), 0px 1px 2px var(--p-shadow-from-direct-light); --p-popover-shadow:-1px 0px 20px var(--p-shadow-from-ambient-light), 0px 1px 5px var(--p-shadow-from-direct-light); --p-modal-shadow:0px 26px 80px var(--p-shadow-from-dim-light), 0px 0px 1px var(--p-shadow-from-dim-light); --p-top-bar-shadow:0 2px 2px -1px var(--p-shadow-from-direct-light); --p-button-drop-shadow:0 1px 0 rgba(0, 0, 0, 0.05); --p-button-inner-shadow:inset 0 -1px 0 rgba(0, 0, 0, 0.2); --p-button-pressed-inner-shadow:inset 0 1px 0 rgba(0, 0, 0, 0.15); --p-override-none:none; --p-override-transparent:transparent; --p-override-one:1; --p-override-visible:visible; --p-override-zero:0; --p-override-loading-z-index:514; --p-button-font-weight:500; --p-non-null-content:''; --p-choice-size:2rem; --p-icon-size:1rem; --p-choice-margin:0.1rem; --p-control-border-width:0.2rem; --p-banner-border-default:inset 0 0.1rem 0 0 var(--p-border-neutral-subdued), inset 0 0 0 0.1rem var(--p-border-neutral-subdued); --p-banner-border-success:inset 0 0.1rem 0 0 var(--p-border-success-subdued), inset 0 0 0 0.1rem var(--p-border-success-subdued); --p-banner-border-highlight:inset 0 0.1rem 0 0 var(--p-border-highlight-subdued), inset 0 0 0 0.1rem var(--p-border-highlight-subdued); --p-banner-border-warning:inset 0 0.1rem 0 0 var(--p-border-warning-subdued), inset 0 0 0 0.1rem var(--p-border-warning-subdued); --p-banner-border-critical:inset 0 0.1rem 0 0 var(--p-border-critical-subdued), inset 0 0 0 0.1rem var(--p-border-critical-subdued); --p-badge-mix-blend-mode:luminosity; --p-thin-border-subdued:0.1rem solid var(--p-border-subdued); --p-text-field-spinner-offset:0.2rem; --p-text-field-focus-ring-offset:-0.4rem; --p-text-field-focus-ring-border-radius:0.7rem; --p-button-group-item-spacing:-0.1rem; --p-duration-1-0-0:100ms; --p-duration-1-5-0:150ms; --p-ease-in:cubic-bezier(0.5, 0.1, 1, 1); --p-ease:cubic-bezier(0.4, 0.22, 0.28, 1); --p-range-slider-thumb-size-base:1.6rem; --p-range-slider-thumb-size-active:2.4rem; --p-range-slider-thumb-scale:1.5; --p-badge-font-weight:400; --p-frame-offset:0px;">
+    <h1>Hello, World!</h1>
+    <button onclick="getProducts()">Products</button>
+    <ul id="product-list"></ul>
+    <button onclick="getOrders()">Orders</button>
+    <ul id="order-list"></ul>
+
+    <!-- Modal to indicate login is needed -->
+    {% if scope_changes_required %}
+    <div>
+      <div id="PolarisPortalsContainer">
+        <div data-portal-id="modal-Polarisportal2">
+          <div>
+            <div class="Polaris-Modal-Dialog__Container" data-polaris-layer="true" data-polaris-overlay="true">
+              <div>
+                <div role="dialog" aria-modal="true" aria-labelledby="Polarismodal-header2" tabindex="-1"
+                  class="Polaris-Modal-Dialog focus-visible" data-focus-visible-added="">
+                  <div class="Polaris-Modal-Dialog__Modal">
+                    <div class="Polaris-Modal-Header">
+                      <div id="Polarismodal-header2" class="Polaris-Modal-Header__Title">
+                        <h2 class="Polaris-DisplayText Polaris-DisplayText--sizeSmall">
+                          The app needs to login
+                        </h2>
+                      </div>
+                    </div>
+                    <div class="Polaris-Modal__BodyWrapper">
+                      <div class="Polaris-Modal__Body Polaris-Scrollable Polaris-Scrollable--vertical"
+                        data-polaris-scrollable="true">
+                        <section class="Polaris-Modal-Section">
+                          <div class="Polaris-TextContainer">
+                            <p>
+                              While you were away, changes were made to the app that require you to login again.
+                            </p>
+                          </div>
+                        </section>
+                      </div>
+                    </div>
+                    <div class="Polaris-Modal-Footer">
+                      <div class="Polaris-Modal-Footer__FooterContent">
+                        <div class="Polaris-Stack Polaris-Stack--alignmentCenter">
+                          <div class="Polaris-Stack__Item Polaris-Stack__Item--fill"></div>
+                          <div class="Polaris-Stack__Item">
+                            <div class="Polaris-ButtonGroup">
+                              <div class="Polaris-ButtonGroup__Item"><button onclick="topLevelRedirectToLogin()"
+                                  class="Polaris-Button Polaris-Button--primary" type="button"><span
+                                    class="Polaris-Button__Content"><span class="Polaris-Button__Text">Login
+                                    </span></span></button></div>
+                            </div>
+                          </div>
+                        </div>
+                      </div>
+                    </div>
+                  </div>
+                </div>
+              </div>
+            </div>
+          </div>
+          <div class="Polaris-Backdrop"></div>
+        </div>
+      </div>
+    </div>
+    <div class="Polaris-Backdrop"></div>
+    {% endif %}
+  </div>
+</body>
diff --git a/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/data_level0.bin b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/data_level0.bin
new file mode 100644
index 00000000..536c94be
Binary files /dev/null and b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/data_level0.bin differ
diff --git a/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/header.bin b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/header.bin
new file mode 100644
index 00000000..074f5b8b
Binary files /dev/null and b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/header.bin differ
diff --git a/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/length.bin b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/length.bin
new file mode 100644
index 00000000..dbd73450
Binary files /dev/null and b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/length.bin differ
diff --git a/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/link_lists.bin b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/76e95778-5f04-4b1d-9334-101cbe997747/link_lists.bin
new file mode 100644
index 00000000..e69de29b
diff --git a/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/chroma.sqlite3 b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/chroma.sqlite3
new file mode 100644
index 00000000..ac3cf628
Binary files /dev/null and b/.kno/embedding_SBERTEmbedding_1746868331433_9274c9a/chroma.sqlite3 differ
diff --git a/SECURITY_AUDIT_Prometheus-beta.md b/SECURITY_AUDIT_Prometheus-beta.md
new file mode 100644
index 00000000..544106e5
--- /dev/null
+++ b/SECURITY_AUDIT_Prometheus-beta.md
@@ -0,0 +1,115 @@
+# Django Security Audit: Vulnerability and Code Quality Comprehensive Report
+
+# 🔒 Codebase Vulnerability and Quality Report
+
+## Overview
+This security audit reveals critical vulnerabilities and code quality issues in the Django sample application. The report provides a comprehensive analysis of potential security risks, performance concerns, and recommended improvements.
+
+## Table of Contents
+- [Security Vulnerabilities](#security-vulnerabilities)
+- [Code Quality Concerns](#code-quality-concerns)
+- [Performance Considerations](#performance-considerations)
+- [Recommended Actions](#recommended-actions)
+
+## Security Vulnerabilities
+
+### [1] Exposed Secret Key 
+_File: sample_django_app/sample_django_app/settings.py_
+```python
+SECRET_KEY = '=y4jnr$*8&jo2$ako6zea2uxar&*re%)otb3@d@=12ao1ca5=o'
+```
+
+**Risk**: High - Hardcoded secret key exposes the application to potential unauthorized access.
+
+**Suggested Fix**:
+```python
+SECRET_KEY = os.getenv('DJANGO_SECRET_KEY')
+```
+
+### [2] Debug Mode Enabled in Production
+_File: sample_django_app/sample_django_app/settings.py_
+```python
+DEBUG = True
+```
+
+**Risk**: High - Reveals sensitive system information and application internals.
+
+**Suggested Fix**:
+```python
+DEBUG = os.getenv('DJANGO_DEBUG', 'False') == 'True'
+```
+
+### [3] Overly Permissive CORS Configuration
+_File: sample_django_app/sample_django_app/settings.py_
+```python
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_ALLOW_CREDENTIALS = True
+```
+
+**Risk**: High - Allows requests from any origin, potentially exposing the application to cross-origin attacks.
+
+**Suggested Fix**:
+```python
+CORS_ORIGIN_ALLOW_ALL = False
+CORS_ORIGIN_WHITELIST = [
+    'https://trusted-domain.com',
+]
+```
+
+## Code Quality Concerns
+
+### [1] Monolithic Application Structure
+_Concern: Project Directory Structure_
+
+**Risk**: Medium - Tight coupling between Django apps reduces maintainability.
+
+**Suggested Fix**:
+- Implement clear separation of concerns
+- Use modular design patterns
+- Consider microservices architecture for complex applications
+
+### [2] Insufficient Error Handling
+_Files: Multiple view files (views.py)_
+
+**Risk**: Medium - Potential unhandled exceptions and lack of comprehensive logging.
+
+**Suggested Fix**:
+- Implement global exception handling
+- Add comprehensive logging mechanisms
+- Use Django's built-in logging framework
+
+## Performance Considerations
+
+### [1] SQLite Database in Production
+_File: sample_django_app/sample_django_app/settings.py_
+```python
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': BASE_DIR / 'db.sqlite3',
+    }
+}
+```
+
+**Risk**: Low-to-Medium - SQLite is not suitable for production scaling.
+
+**Suggested Fix**:
+- Migrate to PostgreSQL
+- Configure connection pooling
+- Implement database-level performance optimizations
+
+## Recommended Actions
+
+1. 🔐 Remove all hardcoded secrets
+2. 🚫 Disable DEBUG mode in production
+3. 🌐 Implement strict CORS policies
+4. 📋 Use environment-based configuration
+5. 📝 Add comprehensive logging and error handling
+6. 💾 Migrate to a production-grade database
+
+## Security Maturity Score: 2/10
+Significant improvements needed in secret management, configuration security, and overall application hardening.
+
+---
+
+**Note**: This report is a snapshot of the current codebase. Regular security audits and continuous improvement are recommended.
\ No newline at end of file