Next major release - V9.0

.github/workflows/ci.yml

@@ -49,6 +49,7 @@ jobs:
         with:
           repository: "oceanprotocol/barge"
           path: "barge"
+          ref: "feature/node-v4"
 
       - name: Set Database Environment Variables
         run: |
@@ -61,7 +62,9 @@ jobs:
         working-directory: ${{ github.workspace }}/barge
         run: |
           bash -x start_ocean.sh 2>&1 > start_ocean.log &
-
+        env: 
+          NODE_VERSION: "pr-1402"
+
       - name: Install deps & build
         run: npm ci && npm run build:metadata
       - name: Wait for node to be ready
@@ -131,6 +134,7 @@ jobs:
         with:
           repository: "oceanprotocol/barge"
           path: "barge"
+          ref: "feature/node-v4"
 
       - name: Login to Docker Hub
         if: ${{ env.DOCKERHUB_PASSWORD && env.DOCKERHUB_USERNAME }}
@@ -151,6 +155,8 @@ jobs:
         working-directory: ${{ github.workspace }}/barge
         run: |
           bash -x start_ocean.sh 2>&1 > start-node.log &
+        env: 
+          NODE_VERSION: "pr-1402"
 
       - name: Install deps & build
         run: npm ci && npm run build:metadata

.github/workflows/publish.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           registry-url: https://registry.npmjs.org/
       - run: npm ci
 

src/@types/Compute.ts

@@ -56,11 +56,19 @@ export interface ComputeEnvironmentFreeOptions {
   maxJobs?: number // maximum number of simultaneous free jobs
   resources?: ComputeResource[]
 }
+// Per-environment capability flags. Both default to true node-side; only an
+// explicit false disables a capability. `services` gates Service-on-Demand.
+export interface ComputeEnvFeatures {
+  computeJobs?: boolean // false → COMPUTE_START + FREE_COMPUTE_START rejected
+  services?: boolean // false → SERVICE_START rejected; env not service-eligible
+}
+
 export interface ComputeEnvironment {
   id: string
   description?: string
   consumerAddress: string
   access?: ComputeEnvironmentAccessOptions
+  features?: ComputeEnvFeatures
   storageExpiry?: number // amount of seconds for storage
   minJobDuration?: number // min billable seconds for a paid job
   maxJobDuration?: number // max duration in seconds for a paid job

src/@types/Provider.ts

@@ -145,7 +145,13 @@ export const PROTOCOL_COMMANDS = {
   PERSISTENT_STORAGE_LIST_FILES: 'persistentStorageListFiles',
   PERSISTENT_STORAGE_UPLOAD_FILE: 'persistentStorageUploadFile',
   PERSISTENT_STORAGE_GET_FILE_OBJECT: 'persistentStorageGetFileObject',
-  PERSISTENT_STORAGE_DELETE_FILE: 'persistentStorageDeleteFile'
+  PERSISTENT_STORAGE_DELETE_FILE: 'persistentStorageDeleteFile',
+  SERVICE_GET_TEMPLATES: 'serviceGetTemplates',
+  SERVICE_START: 'serviceStart',
+  SERVICE_STOP: 'serviceStop',
+  SERVICE_RESTART: 'serviceRestart',
+  SERVICE_GET_STATUS: 'serviceGetStatus',
+  SERVICE_EXTEND: 'serviceExtend'
 }
 
 export interface NodeLogsParams {

src/@types/Services.ts

@@ -0,0 +1,139 @@
+import { ComputeResourceRequest } from './Compute.js'
+
+// Service-on-Demand client types. Mirror of ocean-node
+// `src/@types/C2D/ServiceOnDemand.ts` (the API surface a client interacts with).
+
+// ── Resource requirements (templates) ─────────────────────────────────
+
+export interface TemplateResourceRequirement {
+  // Exactly one of `id` or `kind` is set.
+  id?: string // exact resource id: 'cpu' | 'ram' | 'disk' | named GPU ('gpu-0')
+  kind?: 'discrete' | 'fungible' // match ANY resource of this kind across the env pool
+  type?: string // optional: further filter within kind ('gpu', 'fpga', 'tpu')
+  min: number // MUST have at least this much
+  recommended?: number // ideal amount; below this the env is a poorer fit
+  unit?: string // display hint: 'cores' | 'GB' | 'count'
+  description?: string
+}
+
+export interface UserConfigurableEnvVar {
+  key: string // env var name, supplied via userData
+  validation?: string // optional regex; validated by the node at SERVICE_START time
+  sensitive?: boolean // advisory hint for clients/UI (e.g. mask on input)
+}
+
+// ── Public / sanitized template ───────────────────────────────────────
+// Returned by SERVICE_GET_TEMPLATES. `envVars` values are stripped (keys only).
+// Choosing a matching compute environment is the client's responsibility — see
+// getComputeEnvironments() and the per-env `features.services` flag.
+export interface ServiceTemplatePublic {
+  id: string // [a-z0-9][a-z0-9_-]{0,63}
+  name?: string
+  description?: string
+  image: string // base image name
+  tag?: string // mutually exclusive with checksum/dockerfile
+  checksum?: string // digest: "sha256:<64 hex>"
+  dockerfile?: string // inline Dockerfile content
+  additionalDockerFiles?: Record<string, string> // filename → content; only with dockerfile
+  exposedPorts: number[]
+  envVarKeys?: string[] // keys of the operator-set env vars only, never values
+  userConfigurableEnvVars?: UserConfigurableEnvVar[]
+  command?: string[] // Docker CMD override; ${KEY} expanded from userData
+  entrypoint?: string[] // Docker ENTRYPOINT override
+  requiredResources?: TemplateResourceRequirement[]
+  recommendedResources?: TemplateResourceRequirement[]
+}
+
+// ── Runtime service job ────────────────────────────────────────────────
+
+// Port mapping for a running service (named ServiceJobEndpoint to avoid colliding
+// with the provider-route `ServiceEndpoint` type used for node endpoint discovery).
+export interface ServiceJobEndpoint {
+  containerPort: number
+  hostPort: number
+  url: string // e.g. "http://<nodeHost>:31042"
+}
+
+/* eslint-disable no-unused-vars */
+export enum ServiceStatusNumber {
+  Starting = 10, // DB record created by the start handler; awaits background processing
+  PullImage = 11, // pulling pre-built image from registry
+  PullImageFailed = 12,
+  BuildImage = 13, // building from Dockerfile
+  BuildImageFailed = 14,
+  VulnerableImage = 15, // image scan found critical vulnerabilities
+  Locking = 20, // escrow createLock in progress (funds locked, not yet claimed)
+  Claiming = 30, // payment phase: claimLock on success, or cancelLock if the image step failed
+  Running = 40,
+  Stopping = 50,
+  Stopped = 70,
+  Expired = 75,
+  Error = 99
+}
+/* eslint-enable no-unused-vars */
+
+// Payment record attached to a service job (start payment + each extend).
+export interface ServiceJobPayment {
+  chainId?: number
+  token?: string
+  lockTx?: string
+  claimTx?: string
+  cost?: string | number
+  [key: string]: any
+}
+
+// As returned by the node (userData is always stripped from responses).
+export interface ServiceJob {
+  serviceId: string // unique id for a running service — distinct from a compute jobId
+  clusterHash: string
+  environment: string // envId the service runs on
+  owner: string // consumerAddress
+  image: string
+  tag?: string
+  checksum?: string
+  dockerfile?: string
+  additionalDockerFiles?: Record<string, string>
+  dockerCmd?: string[]
+  dockerEntrypoint?: string[]
+  containerImage: string // resolved final reference used by Docker
+  containerId: string
+  networkId: string // per-service Docker network id
+  status: ServiceStatusNumber
+  statusText: string
+  dateCreated: string // ISO timestamp
+  expiresAt: number // Unix ms timestamp
+  duration: number // requested seconds
+  exposedPorts: number[]
+  endpoints: ServiceJobEndpoint[]
+  resources: any[] // ComputeResourceRequestWithPrice[] on the node
+  payment: ServiceJobPayment // initial start payment
+  extendPayments?: ServiceJobPayment[] // one entry per successful SERVICE_EXTEND
+}
+
+// ── Request shapes ─────────────────────────────────────────────────────
+
+export interface ServicePayment {
+  chainId: number
+  token: string
+}
+
+// A plain key→value map of container env vars. The client always ECIES-encrypts it
+// to the node's public key before sending — callers never pass pre-encrypted data,
+// so a plaintext secret can never be forwarded unencrypted.
+export type ServiceUserData = Record<string, unknown>
+
+export interface ServiceStartParams {
+  environment: string // required: the envId to run the service on
+  image: string // base image name (or build label when dockerfile is set)
+  tag?: string // pull by name:tag
+  checksum?: string // pull by digest: "sha256:<64 hex>"
+  dockerfile?: string // build from inline Dockerfile; requires allowImageBuild on the env
+  additionalDockerFiles?: Record<string, string>
+  dockerCmd?: string[] // exec-form CMD override (no shell)
+  dockerEntrypoint?: string[]
+  exposedPorts?: number[]
+  resources?: ComputeResourceRequest[]
+  duration: number // seconds; capped by serviceOnDemand.maxDurationSeconds
+  userData?: ServiceUserData
+  payment: ServicePayment
+}

src/@types/index.ts

@@ -3,6 +3,7 @@ export * from './Contracts.js'
 export * from './File.js'
 export * from './FileInfo.js'
 export * from './Compute.js'
+export * from './Services.js'
 export * from './Datatoken.js'
 export * from './Dispenser.js'
 export * from './DownloadResponse.js'

src/services/providers/BaseProvider.ts

@@ -30,6 +30,11 @@ import {
   PersistentStorageFileEntry,
   PersistentStorageObject,
   PersistentStorageUpdateBucketResponse,
+  ServiceJob,
+  ServiceTemplatePublic,
+  ServiceStartParams,
+  ServiceUserData,
+  ServicePayment,
   OceanNode,
   NodeP2P,
   CompleteSignature,
@@ -739,6 +744,87 @@ export class BaseProvider {
     )
   }
 
+  // ── Service on Demand ────────────────────────────────────────────────
+
+  public async getServiceTemplates(
+    nodeUri: OceanNode,
+    chainId?: number,
+    signal?: AbortSignal
+  ): Promise<ServiceTemplatePublic[]> {
+    return this.getImpl(nodeUri).getServiceTemplates(nodeUri, chainId, signal)
+  }
+
+  public async serviceStart(
+    nodeUri: OceanNode,
+    signerOrAuthToken: SignerOrAuthTokenOrSignature,
+    params: ServiceStartParams,
+    signal?: AbortSignal
+  ): Promise<ServiceJob[]> {
+    return this.getImpl(nodeUri).serviceStart(nodeUri, signerOrAuthToken, params, signal)
+  }
+
+  public async serviceStop(
+    nodeUri: OceanNode,
+    signerOrAuthToken: SignerOrAuthTokenOrSignature,
+    serviceId: string,
+    signal?: AbortSignal
+  ): Promise<ServiceJob[]> {
+    return this.getImpl(nodeUri).serviceStop(
+      nodeUri,
+      signerOrAuthToken,
+      serviceId,
+      signal
+    )
+  }
+
+  public async serviceExtend(
+    nodeUri: OceanNode,
+    signerOrAuthToken: SignerOrAuthTokenOrSignature,
+    serviceId: string,
+    additionalDuration: number,
+    payment: ServicePayment,
+    signal?: AbortSignal
+  ): Promise<ServiceJob[]> {
+    return this.getImpl(nodeUri).serviceExtend(
+      nodeUri,
+      signerOrAuthToken,
+      serviceId,
+      additionalDuration,
+      payment,
+      signal
+    )
+  }
+
+  public async serviceRestart(
+    nodeUri: OceanNode,
+    signerOrAuthToken: SignerOrAuthTokenOrSignature,
+    serviceId: string,
+    userData?: ServiceUserData,
+    signal?: AbortSignal
+  ): Promise<ServiceJob[]> {
+    return this.getImpl(nodeUri).serviceRestart(
+      nodeUri,
+      signerOrAuthToken,
+      serviceId,
+      userData,
+      signal
+    )
+  }
+
+  public async getServiceStatus(
+    nodeUri: OceanNode,
+    signerOrAuthToken: SignerOrAuthTokenOrSignature,
+    serviceId?: string,
+    signal?: AbortSignal
+  ): Promise<ServiceJob[]> {
+    return this.getImpl(nodeUri).getServiceStatus(
+      nodeUri,
+      signerOrAuthToken,
+      serviceId,
+      signal
+    )
+  }
+
   public async fetchConfig(
     nodeUri: OceanNode,
     payload: Record<string, any>