Configure zstd passthrough through the compression store

.bazelrc

@@ -12,8 +12,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-# Use blake3 as digest function instead of the much slower default sha256.
-startup --digest_function=blake3
+# Keep Bazel aligned with NativeLink's default digest function.
+startup --digest_function=sha256
 common --enable_platform_specific_config
 
 # Don't use legacy toolchain resolution.
@@ -158,7 +158,7 @@ build --@rules_rust//:clippy_flag=-Dclippy::use_debug
 build --@rules_rust//:clippy_flag=-Dclippy::used_underscore_binding
 build --@rules_rust//:clippy_flag=-Dclippy::useless_format
 build --@rules_rust//:clippy_flag=-Dclippy::cast_possible_truncation
-build --@rules_rust//:clippy_flag=-Aclippy::cast_possible_wrap
+build --@rules_rust//:clippy_flag=-Dclippy::cast_possible_wrap
 build --@rules_rust//:clippy_flag=-Aclippy::cast_precision_loss
 build --@rules_rust//:clippy_flag=-Aclippy::cast_sign_loss
 build --@rules_rust//:clippy_flag=-Aclippy::cognitive_complexity
@@ -232,5 +232,8 @@ try-import %workspace%/nixos.bazelrc
 # Generated by the nativelink flake module.
 try-import %workspace%/nativelink.bazelrc
 
+# Opt-in NativeLink Cloud configs used by this repo's CI.
+try-import %workspace%/ci.bazelrc
+
 # Allow user-side customization.
 try-import %workspace%/user.bazelrc

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,120 @@
+name: Bug Report
+description: File a bug report to help us improve NativeLink
+title: "[Bug]: "
+labels: ["type:bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this bug report! Need help right away?
+        Join our [Slack community](https://forms.gle/LtaWSixEC6bYi5xF7) for faster responses.
+
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: What version of NativeLink are you running?
+      placeholder: "e.g. v1.0.0, main@abc1234, or ghcr.io image tag"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: client
+    attributes:
+      label: Client
+      description: Which client are you using with NativeLink?
+      options:
+        - Bazel
+        - Buck2
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: os_arch
+    attributes:
+      label: OS / Architecture
+      description: What operating system and architecture?
+      placeholder: "e.g. Linux x86_64, macOS arm64"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: deployment
+    attributes:
+      label: Deployment method
+      description: How are you deploying NativeLink?
+      options:
+        - Docker
+        - Nix
+        - Kubernetes
+        - Bare metal
+        - Other
+    validations:
+      required: true
+
+  - type: dropdown
+    id: storage
+    attributes:
+      label: Storage backend
+      description: Which storage backend are you using for the CAS?
+      options:
+        - S3
+        - GCS
+        - Azure Blob
+        - Local filesystem
+        - Redis
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: workers
+    attributes:
+      label: Number of workers
+      description: How many workers are in your deployment? (if applicable)
+      placeholder: "e.g. 10"
+
+  - type: input
+    id: cas_size
+    attributes:
+      label: Rough size of CAS
+      description: Approximately how large is your CAS store?
+      placeholder: "e.g. ~50GiB on local SSD"
+
+  - type: textarea
+    id: config
+    attributes:
+      label: Configuration
+      description: Please paste a sanitized version of your NativeLink configuration.
+      render: json5
+      placeholder: "{\n  ...\n}"
+
+  - type: textarea
+    id: expected_behavior
+    attributes:
+      label: Expected behavior
+      description: What did you expect to happen?
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual_behavior
+    attributes:
+      label: Actual behavior
+      description: What actually happened?
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs / error output
+      description: Please paste any relevant logs, error messages, or stack traces.
+      render: shell
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Anything else you think would be useful (links, references, screenshots, etc.).

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Join our Slack community
+    url: https://forms.gle/LtaWSixEC6bYi5xF7
+    about: Get faster responses from the NativeLink community
+  - name: Commercial support
+    url: mailto:marcus@tracemachina.com
+    about: Contact us for commercial support inquiries

.github/ISSUE_TEMPLATE/config_help.yml

@@ -0,0 +1,108 @@
+name: Configuration / Deployment Help
+description: Ask for help with configuring, deploying, or troubleshooting NativeLink
+title: "[Config/Help]: "
+labels: ["type:question"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        We're here to help! For faster responses, consider joining our
+        [Slack community](https://forms.gle/LtaWSixEC6bYi5xF7). For commercial
+        support, email us at contact@nativelink.com.
+
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: What version of NativeLink are you running?
+      placeholder: "e.g. v1.0.0, main@abc1234, or ghcr.io image tag"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: client
+    attributes:
+      label: Client
+      description: Which client are you using with NativeLink?
+      options:
+        - Bazel
+        - Buck2
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: os_arch
+    attributes:
+      label: OS / Architecture
+      description: What operating system and architecture?
+      placeholder: "e.g. Linux x86_64, macOS arm64"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: deployment
+    attributes:
+      label: Deployment method
+      description: How are you deploying NativeLink?
+      options:
+        - Docker
+        - Nix
+        - Kubernetes
+        - Bare metal
+        - Other
+    validations:
+      required: true
+
+  - type: dropdown
+    id: storage
+    attributes:
+      label: Storage backend
+      description: Which storage backend are you using for the CAS?
+      options:
+        - S3
+        - GCS
+        - Azure Blob
+        - Local filesystem
+        - Redis
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: workers
+    attributes:
+      label: Number of workers
+      description: How many workers are in your deployment? (if applicable)
+      placeholder: "e.g. 10"
+
+  - type: input
+    id: cas_size
+    attributes:
+      label: Rough size of CAS
+      description: Approximately how large is your CAS store?
+      placeholder: "e.g. ~50GiB on local SSD"
+
+  - type: textarea
+    id: config
+    attributes:
+      label: Configuration
+      description: Please paste a sanitized version of your NativeLink configuration.
+      render: json5
+      placeholder: "{\n  ...\n}"
+
+  - type: textarea
+    id: question
+    attributes:
+      label: What do you need help with?
+      description: Describe your question or issue in detail.
+      placeholder: "I'm trying to configure..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: tried
+    attributes:
+      label: What have you tried so far?
+      description: Steps you've already taken to resolve this.
+      placeholder: "I've tried..."

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,40 @@
+name: Feature Request
+description: Suggest an idea or improvement for NativeLink
+title: "[Feature]: "
+labels: ["type:enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for sharing your idea! Need to discuss it first?
+        Join our [Slack community](https://forms.gle/LtaWSixEC6bYi5xF7) for faster feedback.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem statement
+      description: What problem are you trying to solve? What use case does this unlock?
+      placeholder: "I'm always frustrated when..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+      description: What would you like to see added or changed?
+      placeholder: "A new configuration option that..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: What workarounds or alternative solutions have you considered?
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Any links, references, screenshots, or prior art that informed this request.

.github/ISSUE_TEMPLATE/general.yml

@@ -0,0 +1,44 @@
+name: General Issue
+description: For anything that doesn't fit the other categories
+title: "[General]: "
+labels: ["needs:triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Not sure if this is a bug or feature? Feel free to use this template.
+        For real-time help, join our [Slack community](https://forms.gle/LtaWSixEC6bYi5xF7).
+
+  - type: dropdown
+    id: type
+    attributes:
+      label: Issue type
+      options:
+        - Question
+        - Discussion
+        - Suggestion
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: Version (if applicable)
+      description: What version of NativeLink are you running?
+      placeholder: "e.g. v1.0.0, main@abc1234"
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: What's on your mind?
+      placeholder: "Tell us what you're thinking about..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Any links, references, or screenshots that help explain.

.github/actions/free-disk/action.yaml

@@ -13,18 +13,26 @@ runs:
         endersonmenezes/free-disk-space@7901478139cff6e9d44df5972fd8ab8fcade4db1
       with:
         rm_cmd: "rmz" # For speed up
+        rmz_version: "3.2.0"
         remove_android: false # Takes too long.
         remove_dotnet: true
         remove_haskell: true
-        remove_tool_cache: false # TODO(palfrey): Do we really need this?
-        # Note: Not deleting google-cloud-cli because it takes too long.
+        remove_tool_cache: false
         remove_folders: >
+          /opt/go
+          /opt/Ruby
+          /opt/microsoft/msedge
+          /usr/local/lib/android
           /usr/share/swift
           /usr/share/miniconda
           /usr/share/az*
           /usr/share/glade*
           /usr/local/share/chromium
           /usr/local/share/powershell
+          /usr/local/julia
+          /usr/local/aws-cli
+          /usr/local/aws-sam-cli
+          /usr/share/gradle
 
     # using hints from https://github.com/actions/runner-images/issues/10511#issuecomment-3984466720
     - if: runner.os == 'macOS'

.github/actions/prepare-nix/action.yaml

@@ -11,6 +11,9 @@ runs:
       uses: ./.github/actions/free-disk
 
     - name: Install Nix
+      # Stay on the Determinate installer: the nix-quick-install switch (Nix
+      # 2.34.7) makes the nix2container multi-arch image publish fail with a
+      # layer digest mismatch. See the tagged image workflow.
       uses: >- # https://github.com/DeterminateSystems/nix-installer-action/releases/tag/v22
         DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25
       with: