Extract provision_merchant() service for shared use

Both _auto_create_merchant (lazy GET fallback in views_api) and
LNbits' _create_default_merchant (eager signup hook) used to
reimplement merchant + zone + stall creation independently. Moves the
canonical implementation to services.provision_merchant() so both
call sites stay in lockstep — future changes (NIP-17 kind 10050 relay
list, additional default zones, etc.) only happen in one place.

- services.provision_merchant(user_id, wallet_id, public_key,
  private_key, display_name, config): creates merchant if absent,
  default 'Online' zone, default '<username>'s Store' stall, and
  publishes the kind 30017 stall event. Idempotent on the merchant
  pubkey: returns the existing merchant unchanged if one exists.
- views_api._auto_create_merchant: now a 10-line wrapper that loads
  the account, generates fallback keys if missing, then delegates.

The LNbits-side hook (lnbits/core/services/users.py:_create_default_merchant)
will be updated in a companion commit to also call this service.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

README.md

@@ -1,3 +1,13 @@
+<a href="https://lnbits.com" target="_blank" rel="noopener noreferrer">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://i.imgur.com/QE6SIrs.png">
+    <img src="https://i.imgur.com/fyKPgVT.png" alt="LNbits" style="width:280px">
+  </picture>
+</a>
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-success?logo=open-source-initiative&logoColor=white)](./LICENSE)
+[![Built for LNbits](https://img.shields.io/badge/Built%20for-LNbits-4D4DFF?logo=lightning&logoColor=white)](https://github.com/lnbits/lnbits)
+
 # Nostr Market ([NIP-15](https://github.com/nostr-protocol/nips/blob/master/15.md)) - <small>[LNbits](https://github.com/lnbits/lnbits) extension</small>
 
 <small>For more about LNBits extension check [this tutorial](https://github.com/lnbits/lnbits/wiki/LNbits-Extensions).</small>
@@ -147,3 +157,10 @@ Stall and product are _Parameterized Replaceable Events_ according to [NIP-33](h
 Order placing, invoicing, payment details and order statuses are handled over Nostr using [NIP-04](https://github.com/nostr-protocol/nips/blob/master/04.md).
 
 Customer support is handled over whatever communication method was specified. If communicationg via nostr, [NIP-04](https://github.com/nostr-protocol/nips/blob/master/04.md) is used.
+
+## Powered by LNbits
+
+[LNbits](https://lnbits.com) is a free and open-source lightning accounts system.
+
+[![Visit LNbits Shop](https://img.shields.io/badge/Visit-LNbits%20Shop-7C3AED?logo=shopping-cart&logoColor=white&labelColor=5B21B6)](https://shop.lnbits.com/)
+[![Try myLNbits SaaS](https://img.shields.io/badge/Try-myLNbits%20SaaS-2563EB?logo=lightning&logoColor=white&labelColor=1E40AF)](https://my.lnbits.com/login)

config.json

@@ -1,12 +1,15 @@
 {
-  "name": "Nostr Market",
+  "id": "nostrmarket",
   "version": "1.1.0",
+  "name": "Nostr Market",
+  "repo": "https://github.com/lnbits/nostrmarket",
   "short_description": "Nostr Webshop/market on LNbits",
-  "tile": "/nostrmarket/static/images/nostr-market.png",
+  "description": "",
+  "tile": "/nostrmarket/static/images/bitcoin-shop.png",
   "min_lnbits_version": "1.4.0",
   "contributors": [
     {
-      "name": "motorina0",
+      "name": "Vlad Stan",
       "uri": "https://github.com/motorina0",
       "role": "Contributor"
     },
@@ -19,6 +22,11 @@
       "name": "talvasconcelos",
       "uri": "https://github.com/talvasconcelos",
       "role": "Developer"
+    },
+    {
+      "name": "BenGWeeks",
+      "uri": "https://github.com/BenGWeeks",
+      "role": "Developer"
     }
   ],
   "images": [
@@ -44,5 +52,9 @@
   ],
   "description_md": "https://raw.githubusercontent.com/lnbits/nostrmarket/main/description.md",
   "terms_and_conditions_md": "https://raw.githubusercontent.com/lnbits/nostrmarket/main/toc.md",
-  "license": "MIT"
+  "license": "MIT",
+  "paid_features": "",
+  "tags": ["Nostr", "Marketplace"],
+  "donate": "",
+  "hidden": false
 }

description.md

@@ -1,12 +1,10 @@
-> IMPORTANT: Nostr market needs the nostr-client extension installed.
+Buy and sell products over Nostr using the NIP-15 marketplace protocol.
 
-Buy and sell things over Nostr, using NIP15 https://github.com/nostr-protocol/nips/blob/master/15.md
+Its functions include:
 
-Nostr was partly based on the the previous version of this extension "Diagon Alley", so lends itself very well to buying and sellinng over Nostr.
+- Managing products, sales, and customer communication as a merchant
+- Browsing and ordering products as a customer
+- Tracking order status and delivery
+- Communicating via NIP-17 private direct messages (NIP-44 encryption + NIP-59 gift wrapping)
 
-The Nostr Market extension includes:
+A decentralized commerce solution for merchants and buyers who want to trade goods and services over Nostr with end-to-end encrypted communication.
-
-- A merchant client to manage products, sales and communication with customers.
-- A customer client to find and order products from merchants, communicate with merchants and track status of ordered products.
-
-All communication happens over NIP-17 private direct messages (NIP-44 encryption + NIP-59 gift wrapping).

static/components/merchant-tab.js

@@ -29,8 +29,14 @@ window.app.component('merchant-tab', {
   },
   computed: {
     marketClientUrl: function () {
+      if (!this.publicKey) {
         return '/nostrmarket/market'
       }
+
+      const url = new URL('/nostrmarket/market', window.location.origin)
+      url.searchParams.set('merchant', this.publicKey)
+      return url.pathname + url.search
+    }
   },
   methods: {
     publishProfile: async function () {

static/market/js/utils.js

@@ -1,5 +1,43 @@
 var NostrTools = window.NostrTools
 
+;(function ensureRandomUUID() {
+    if (!globalThis.crypto) {
+        globalThis.crypto = {}
+    }
+    if (!globalThis.crypto.randomUUID) {
+        globalThis.crypto.randomUUID = function () {
+            const getRandomValues = globalThis.crypto.getRandomValues
+            if (getRandomValues) {
+                const bytes = new Uint8Array(16)
+                getRandomValues.call(globalThis.crypto, bytes)
+                bytes[6] = (bytes[6] & 0x0f) | 0x40
+                bytes[8] = (bytes[8] & 0x3f) | 0x80
+                const hex = Array.from(bytes, b =>
+                    b.toString(16).padStart(2, '0')
+                ).join('')
+                return (
+                    hex.slice(0, 8) +
+                    '-' +
+                    hex.slice(8, 12) +
+                    '-' +
+                    hex.slice(12, 16) +
+                    '-' +
+                    hex.slice(16, 20) +
+                    '-' +
+                    hex.slice(20)
+                )
+            }
+
+            let d = Date.now()
+            return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, c => {
+                const r = (d + Math.random() * 16) % 16 | 0
+                d = Math.floor(d / 16)
+                return (c === 'x' ? r : (r & 0x3) | 0x8).toString(16)
+            })
+        }
+    }
+})()
+
 var defaultRelays = [
     'wss://relay.damus.io',
     'wss://relay.snort.social',
@@ -44,13 +82,24 @@ function confirm(message) {
 
 
 async function hash(string) {
+    const subtle = globalThis.crypto && globalThis.crypto.subtle
+    if (subtle && subtle.digest) {
         const utf8 = new TextEncoder().encode(string)
-    const hashBuffer = await crypto.subtle.digest('SHA-256', utf8)
+        const hashBuffer = await subtle.digest('SHA-256', utf8)
         const hashArray = Array.from(new Uint8Array(hashBuffer))
-    const hashHex = hashArray
+        return hashArray.map(bytes => bytes.toString(16).padStart(2, '0')).join('')
-        .map(bytes => bytes.toString(16).padStart(2, '0'))
+    }
-        .join('')
+
-    return hashHex
+    // Fallback for non-secure contexts where crypto.subtle is unavailable.
+    return fallbackHash(string)
+}
+
+function fallbackHash(string) {
+    let hash = 5381
+    for (let i = 0; i < string.length; i++) {
+        hash = ((hash << 5) + hash) + string.charCodeAt(i)
+    }
+    return (hash >>> 0).toString(16).padStart(8, '0')
 }
 
 function isJson(str) {

templates/nostrmarket/components/merchant-tab.html

@@ -9,29 +9,26 @@
             </div>
           </div>
           <div class="row q-mb-md q-gutter-sm">
-            <q-btn
-              outline
-              color="primary"
-              @click="showEditProfileDialog = true"
-              icon="edit"
-              >Edit</q-btn
-            >
-            <q-btn
-              outline
-              color="primary"
-              icon="qr_code"
-              @click="showKeysDialog = true"
-            >
-              <q-tooltip>Show Keys</q-tooltip>
-            </q-btn>
             <q-btn-dropdown
               split
               outline
               color="primary"
-              icon="swap_horiz"
+              icon="vpn_key"
-              label="Switch"
+              label="Keys"
             >
               <q-list>
+                <q-item clickable v-close-popup @click="showKeysDialog = true">
+                  <q-item-section avatar>
+                    <q-icon name="vpn_key" color="primary"></q-icon>
+                  </q-item-section>
+                  <q-item-section>
+                    <q-item-label>View Keys</q-item-label>
+                    <q-item-label caption
+                      >Show public/private keys</q-item-label
+                    >
+                  </q-item-section>
+                </q-item>
+                <q-separator></q-separator>
                 <q-item-label header>Saved Profiles</q-item-label>
                 <q-item>
                   <q-item-section avatar>
@@ -69,6 +66,13 @@
                 </q-item>
               </q-list>
             </q-btn-dropdown>
+            <q-btn
+              outline
+              color="primary"
+              @click="showEditProfileDialog = true"
+              icon="edit"
+              label="Edit Profile"
+            ></q-btn>
             <q-btn-dropdown
               split
               outline
@@ -121,6 +125,15 @@
                 </q-item>
               </q-list>
             </q-btn-dropdown>
+            <q-btn
+              outline
+              color="primary"
+              icon="storefront"
+              label="Marketplace"
+              :href="marketClientUrl"
+              target="_blank"
+              rel="noopener"
+            ></q-btn>
           </div>
         </q-card-section>