feat: add Zcash Shielded Assets (ZSA) support (draft)

.cargo/config.toml

@@ -3,6 +3,12 @@
 # Flags that apply to all Zebra crates and configurations
 [target.'cfg(all())']
 rustflags = [
+    # Enable tx_v6 everywhere by default
+    "--cfg", 'feature="tx_v6"',
+
+    # TODO: Remove when ZSA is stable
+    "--cfg", "zcash_unstable=\"nu7\"",
+
     # Zebra standard lints for Rust 1.65+
 
     # High-risk code
@@ -82,6 +88,12 @@ rustflags = [
 
 [build]
 rustdocflags = [
+    # Enable tx_v6 everywhere by default
+    "--cfg", 'feature="tx_v6"',
+
+    # TODO: Remove when ZSA is stable
+    "--cfg", "zcash_unstable=\"nu7\"",
+
     # The -A and -W settings must be the same as the `RUSTDOCFLAGS` in:
     # https://github.com/ZcashFoundation/zebra/blob/main/.github/workflows/docs-deploy-firebase.yml#L68
 

.config/nextest.toml

@@ -130,3 +130,13 @@ default-filter = 'package(zebrad) and test(=lightwalletd_test_suite)'
 [profile.rpc-z-getsubtreesbyindex-snapshot]
 slow-timeout = { period = "30m", terminate-after = 2 }
 default-filter = 'package(zebrad) and test(=fully_synced_rpc_z_getsubtreesbyindex_snapshot_test)'
+
+# --- QEDIT temporary retries ---
+
+# TODO: Remove retries after investigating periodic random failures.
+# Add more tests here only after confirming similar intermittent failures.
+[[profile.default.overrides]]
+filter = '''
+test(=sync_large_checkpoints_mempool_mainnet)
+'''
+retries = 3

.dockerignore

@@ -22,4 +22,4 @@
 !zebra-*
 !zebrad
 !docker/entrypoint.sh
-!docker/default-zebra-config.toml
+!testnet-single-node-deploy

.github/workflows/ci-basic.yml

@@ -0,0 +1,92 @@
+name: Basic checks
+
+on: [push]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    if: ${{ github.repository == 'QED-it/zebra' }}
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        nu7:
+          - true
+          - false
+
+    env:
+      # Use system-installed RocksDB library instead of building from scratch
+      ROCKSDB_LIB_DIR: /usr/lib
+      # Use system-installed Snappy library for compression in RocksDB
+      SNAPPY_LIB_DIR: /usr/lib/x86_64-linux-gnu
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Show system resource summary (before cleanup)
+        run: |
+          df -h
+          free -h
+          lscpu | egrep 'Model name|Socket|Thread|Core|CPU\(s\)'
+
+      - name: Free disk space (safe cleanup for Rust CI)
+        run: |
+          # Remove heavy preinstalled SDKs and toolchains
+          sudo rm -rf /usr/local/lib/android || true
+          sudo rm -rf "$AGENT_TOOLSDIRECTORY" || true  # preinstalled tool caches
+          df -h
+
+      - name: Install dependencies on Ubuntu
+        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler librocksdb-dev
+
+      - name: Install formatting & linting tools
+        run: rustup component add rustfmt clippy
+
+      - name: Verify working directory is clean
+        run: git diff --exit-code
+
+      - name: Strip nu7/tx_v6 flags from config
+        if: ${{ !matrix.nu7 }}
+        run: |
+          sed -i 's|.*"--cfg", .feature="tx_v6".*|# &|' .cargo/config.toml
+          sed -i 's|.*"--cfg", "zcash_unstable=\\"nu7\\"".*|# &|' .cargo/config.toml
+
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@305bebabd4457bed9b82541755f034994382465b # v2.68.10
+        with:
+          tool: cargo-nextest
+
+      - name: Run tests
+        run: |
+          timeout --preserve-status 1h \
+            cargo nextest run --workspace --locked
+
+      - name: Run doc tests
+        run: |
+          timeout --preserve-status 30m \
+            cargo test --doc --workspace --locked
+
+      - name: Run doc check
+        run: cargo doc --workspace --no-deps --all-features --document-private-items --locked
+
+      - name: Run format check
+        run: cargo fmt -- --check
+
+      - name: Run clippy
+        run: cargo clippy --workspace --all-targets --features "default-release-binaries proptest-impl lightwalletd-grpc-tests zebra-checkpoints"
+
+      - name: Restore cargo config
+        run: git checkout -- .cargo/config.toml
+
+      - name: Verify working directory is clean
+        run: git diff --exit-code
+
+      - name: Show system resource summary
+        run: |
+          df -h
+          free -h
+          lscpu | egrep 'Model name|Socket|Thread|Core|CPU\(s\)'

.github/workflows/lint.yml

@@ -2,7 +2,11 @@ name: Lint
 
 on:
   pull_request:
-    branches: [main]
+    branches:
+      - main
+      # TODO: Temporary ZSA integration branches. Remove before merging to main.
+      - zsa-support
+      - v4.2.0-dev
     paths:
       - "**/*.rs"
       - "**/Cargo.toml"
@@ -46,7 +50,8 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        rust-version: [stable, beta]
+        # TODO: QED-it temporary Rust 1.94 pin: stable when testing Zebra v4.2.0 on upstream CI; remove before upstream merge.
+        rust-version: [1.94]
         type: [release, tests]
         include:
           - type: release
@@ -161,11 +166,13 @@ jobs:
           persist-credentials: false
       - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c #v1.15.2
         with:
-          toolchain: nightly
+          # TODO: QED-it temp nightly pin: matches Zebra v4.2.0 CI test period; remove before upstream merge.
+          toolchain: nightly-2026-03-06
           cache-on-failure: true
       - uses: taiki-e/install-action@305bebabd4457bed9b82541755f034994382465b #v2.68.10
         with:
-          tool: cargo-udeps
+          # TODO: QED-it temp cargo-udeps 0.1.60 pin: stable for Zebra v4.2.0 CI; remove before upstream merge.
+          tool: cargo-udeps@0.1.60
       - uses: ./.github/actions/setup-zebra-build
       - run: cargo udeps --workspace --all-targets --all-features --locked
 

.github/workflows/test-crates.yml

@@ -2,7 +2,11 @@ name: Test Crate Build
 
 on:
   pull_request:
-    branches: [main]
+    branches:
+      - main
+      # TODO: Temporary ZSA integration branches. Remove before merging to main.
+      - zsa-support
+      - v4.2.0-dev
     paths:
       - "**/*.rs"
       - "**/Cargo.toml"
@@ -57,7 +61,8 @@ jobs:
 
       - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c #v1.15.2
         with:
-          toolchain: stable
+          # TODO: QED-it temp Rust 1.94 pin: stable for Zebra v4.2.0 CI; remove before upstream merge.
+          toolchain: "1.94"
           components: clippy
           cache-on-failure: true
       - uses: ./.github/actions/setup-zebra-build
@@ -109,7 +114,8 @@ jobs:
 
       - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c #v1.15.2
         with:
-          toolchain: stable
+          # TODO: QED-it temp Rust 1.94 pin: stable for Zebra v4.2.0 CI; remove before upstream merge.
+          toolchain: "1.94"
           components: clippy
           cache-key: crate-build-${{ matrix.crate }}
           cache-on-failure: true
@@ -184,7 +190,6 @@ jobs:
           cargo clippy --package ${{ matrix.crate }} --all-features --all-targets -- -D warnings
           cargo build --package ${{ matrix.crate }} --all-features --all-targets
 
-
   test-crate-build-success:
     name: test crate build success
     runs-on: ubuntu-latest

.github/workflows/test-docker.yml

@@ -2,7 +2,11 @@ name: Test Docker Config
 
 on:
   pull_request:
-    branches: [main]
+    branches:
+      - main
+      # TODO: Temporary ZSA integration branches. Remove before merging to main.
+      - zsa-support
+      - v4.2.0-dev
     paths:
       - "**/*.rs"
       - "**/Cargo.toml"

.github/workflows/tests-unit.yml

@@ -2,7 +2,11 @@ name: Unit Tests
 
 on:
   pull_request:
-    branches: [main]
+    branches:
+      - main
+      # TODO: Temporary ZSA integration branches. Remove before merging to main.
+      - zsa-support
+      - v4.2.0-dev
     paths:
       - "**/*.rs"
       - "**/Cargo.toml"
@@ -66,6 +70,9 @@ jobs:
       - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c #v1.15.2
         with:
           toolchain: ${{ matrix.rust-version }}
+          # Mirror the cfgs in .cargo/config.toml; the action's RUSTFLAGS export
+          # would otherwise replace them.
+          rustflags: '-D warnings --cfg zcash_unstable="nu7" --cfg feature="tx_v6"'
           cache-key: unit-tests-${{ matrix.os }}-${{ matrix.rust-version }}-${{ matrix.features }}
           cache-on-failure: true
       - uses: taiki-e/install-action@305bebabd4457bed9b82541755f034994382465b #v2.68.10