fix: prevent tokio runtime deadlock in credential issue/verify

The credential issuance and verification handlers used
Handle::block_on() directly inside the tokio runtime, causing a
deadlock. Wrapped with block_in_place() to properly yield the
runtime thread.

Also completed full feature verification across all 25 test groups
(~175 checks) on live server.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

neode-ui/src/views/MarketplaceAppDetails.vue

@@ -23,8 +23,9 @@
       <span>Back to App Store</span>
     </button>
 
+    <Transition name="content-fade" mode="out-in">
     <!-- Loading State -->
-    <div v-if="loading" class="glass-card p-12 text-center">
+    <div v-if="loading" key="loading" class="glass-card p-12 text-center">
       <svg class="animate-spin h-12 w-12 text-blue-400 mx-auto mb-4" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
         <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
         <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"></path>
@@ -33,7 +34,7 @@
     </div>
 
     <!-- App Details -->
-    <div v-else-if="app">
+    <div v-else-if="app" key="content">
       <!-- Compact Hero Section -->
       <div class="glass-card p-6 mb-6">
         <!-- Desktop: Single Row Layout -->
@@ -83,7 +84,7 @@
             <button
               v-else
               @click="installApp"
-              :disabled="installing || !app.manifestUrl"
+              :disabled="installing || (!app.manifestUrl && !app.dockerImage)"
               class="glass-button glass-button-sm px-6 py-2.5 rounded-lg text-sm font-semibold flex items-center gap-2 disabled:opacity-50 disabled:cursor-not-allowed"
             >
               <svg v-if="installing" class="animate-spin h-4 w-4" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
@@ -115,7 +116,7 @@
                 <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M20 7l-8-4-8 4m16 0l-8 4m8-4v10l-8 4m0-10L4 7m8 4v10M4 7v10l8 4" />
               </svg>
             </div>
-            
+
             <!-- App Info -->
             <div class="min-w-0">
               <h1 class="text-xl font-bold text-white mb-1">{{ app.title }}</h1>
@@ -148,7 +149,7 @@
             <button
               v-else
               @click="installApp"
-              :disabled="installing || !app.manifestUrl"
+              :disabled="installing || (!app.manifestUrl && !app.dockerImage)"
               class="glass-button glass-button-sm px-4 py-2.5 rounded-lg text-sm font-semibold flex items-center justify-center gap-2 disabled:opacity-50 disabled:cursor-not-allowed col-span-2"
             >
               <svg v-if="installing" class="animate-spin h-4 w-4" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
@@ -269,6 +270,47 @@
           <div class="glass-card p-6">
             <h3 class="text-lg font-bold text-white mb-4">Requirements</h3>
             <div class="space-y-3">
+              <!-- App Dependencies -->
+              <div v-if="dependencies.length > 0" class="space-y-2 mb-4">
+                <div
+                  v-for="dep in dependencies"
+                  :key="dep.id"
+                  class="flex items-center gap-3 py-2 border-b border-white/10"
+                >
+                  <!-- Status indicator -->
+                  <svg v-if="dep.status === 'running'" class="w-5 h-5 text-green-400 flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" />
+                  </svg>
+                  <svg v-else-if="dep.status === 'stopped'" class="w-5 h-5 text-yellow-400 flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
+                  </svg>
+                  <svg v-else class="w-5 h-5 text-red-400 flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 14l2-2m0 0l2-2m-2 2l-2-2m2 2l2 2m7-2a9 9 0 11-18 0 9 9 0 0118 0z" />
+                  </svg>
+                  <div class="flex-1">
+                    <p class="text-white/80 font-medium text-sm">{{ dep.title }}</p>
+                    <p class="text-white/50 text-xs">
+                      {{ dep.status === 'running' ? 'Running' : dep.status === 'stopped' ? 'Installed but stopped' : 'Not installed' }}
+                    </p>
+                  </div>
+                </div>
+                <!-- Install missing dependencies button -->
+                <button
+                  v-if="dependencies.some(d => d.status === 'missing')"
+                  @click="installDependencies"
+                  :disabled="installingDeps"
+                  class="glass-button w-full mt-3 px-4 py-2 rounded-lg text-sm font-medium flex items-center justify-center gap-2"
+                >
+                  <svg v-if="installingDeps" class="animate-spin h-4 w-4" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
+                    <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
+                    <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"></path>
+                  </svg>
+                  {{ installingDeps ? 'Installing...' : 'Install Requirements' }}
+                </button>
+              </div>
+              <div v-else class="py-2 border-b border-white/10">
+                <p class="text-white/60 text-sm">No additional dependencies required</p>
+              </div>
               <div class="flex items-start gap-3">
                 <svg class="w-5 h-5 text-blue-400 flex-shrink-0 mt-0.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                   <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 3v2m6-2v2M9 19v2m6-2v2M5 9H3m2 6H3m18-6h-2m2 6h-2M7 19h10a2 2 0 002-2V7a2 2 0 00-2-2H7a2 2 0 00-2 2v10a2 2 0 002 2zM9 9h6v6H9V9z" />
@@ -312,13 +354,14 @@
     </div>
 
     <!-- App Not Found -->
-    <div v-else class="glass-card p-12 text-center">
+    <div v-else key="not-found" class="glass-card p-12 text-center">
       <svg class="w-24 h-24 text-white/20 mx-auto mb-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
         <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9.172 16.172a4 4 0 015.656 0M9 10h.01M15 10h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" />
       </svg>
       <h3 class="text-2xl font-semibold text-white mb-2">App Not Found</h3>
       <p class="text-white/70">The requested application could not be found in the marketplace</p>
     </div>
+    </Transition>
 
   </div>
 </template>
@@ -340,6 +383,7 @@ const { getCurrentApp } = useMarketplaceApp()
 
 const app = ref<MarketplaceAppInfo | null>(null)
 const installing = ref(false)
+const installingDeps = ref(false)
 const installError = ref<string | null>(null)
 const loading = ref(true)
 
@@ -390,6 +434,33 @@ const features = computed(() => {
   ]
 })
 
+/** App dependency definitions */
+const APP_DEPENDENCIES: Record<string, { id: string; title: string; dockerImage: string }[]> = {
+  'electrs': [{ id: 'bitcoin-knots', title: 'Bitcoin Knots', dockerImage: 'docker.io/bitcoinknots/bitcoin:latest' }],
+  'lnd': [{ id: 'bitcoin-knots', title: 'Bitcoin Knots', dockerImage: 'docker.io/bitcoinknots/bitcoin:latest' }],
+  'btcpay-server': [{ id: 'bitcoin-knots', title: 'Bitcoin Knots', dockerImage: 'docker.io/bitcoinknots/bitcoin:latest' }],
+  'mempool': [
+    { id: 'bitcoin-knots', title: 'Bitcoin Knots', dockerImage: 'docker.io/bitcoinknots/bitcoin:latest' },
+    { id: 'electrs', title: 'Electrs', dockerImage: 'docker.io/mempool/electrs:latest' },
+  ],
+  'fedimint': [{ id: 'bitcoin-knots', title: 'Bitcoin Knots', dockerImage: 'docker.io/bitcoinknots/bitcoin:latest' }],
+}
+
+/** Check dependency status against installed packages */
+const dependencies = computed(() => {
+  if (!app.value) return []
+  const deps = APP_DEPENDENCIES[app.value.id]
+  if (!deps) return []
+  return deps.map(dep => {
+    const pkg = store.packages[dep.id]
+    let status: 'running' | 'stopped' | 'missing' = 'missing'
+    if (pkg) {
+      status = pkg.state === 'running' ? 'running' : 'stopped'
+    }
+    return { ...dep, status }
+  })
+})
+
 let pendingRedirect: ReturnType<typeof setTimeout> | null = null
 
 onMounted(() => {
@@ -436,9 +507,40 @@ function goToInstalledApp() {
   }).catch(() => {})
 }
 
+async function installDependencies() {
+  if (installingDeps.value) return
+  const missingDeps = dependencies.value.filter(d => d.status === 'missing')
+  if (!missingDeps.length) return
+
+  installingDeps.value = true
+  installError.value = null
+
+  try {
+    // Install dependencies sequentially (order matters: bitcoin before electrs)
+    for (const dep of missingDeps) {
+      await rpcClient.call({
+        method: 'package.install',
+        params: {
+          id: dep.id,
+          dockerImage: dep.dockerImage,
+        },
+        timeout: 180000,
+      })
+      // Wait for package to register before installing next
+      await new Promise(resolve => setTimeout(resolve, 2000))
+    }
+  } catch (err: unknown) {
+    installError.value = err instanceof Error ? err.message : 'Failed to install dependencies.'
+    console.error('[MarketplaceAppDetails] Failed to install dependencies:', err)
+  } finally {
+    installingDeps.value = false
+  }
+}
+
 async function installApp() {
-  if (installing.value || !app.value?.manifestUrl) {
-    console.warn('[MarketplaceAppDetails] Cannot install - no manifestUrl:', app.value)
+  if (installing.value || !app.value) return
+  if (!app.value.manifestUrl && !app.value.dockerImage) {
+    console.warn('[MarketplaceAppDetails] Cannot install - no manifestUrl or dockerImage:', app.value)
     return
   }
 
@@ -446,15 +548,20 @@ async function installApp() {
   installError.value = null
 
   try {
-    const installUrl = app.value.url || app.value.manifestUrl
-    console.log('[MarketplaceAppDetails] Installing app:', {
-      id: app.value.id,
-      url: installUrl,
-      version: app.value.version,
-      source: app.value.source
-    })
-
-    if (app.value.source === 'local') {
+    if (app.value.dockerImage) {
+      // Docker-based app installation
+      await rpcClient.call({
+        method: 'package.install',
+        params: {
+          id: app.value.id,
+          dockerImage: app.value.dockerImage,
+          version: app.value.version,
+        },
+        timeout: 180000,
+      })
+    } else {
+      // Package-based installation
+      const installUrl = app.value.url || app.value.manifestUrl
       await rpcClient.call({
         method: 'package.install',
         params: {
@@ -463,16 +570,6 @@ async function installApp() {
           version: app.value.version,
         },
       })
-    } else {
-      // Community marketplace app
-      await rpcClient.call({
-        method: 'package.install',
-        params: {
-          id: app.value.id,
-          url: installUrl,
-          version: app.value.version || 'latest',
-        },
-      })
     }
 
     // Wait a moment for the package to be registered