Cherrrpick #1578 into nomulus-20220328-RC00

.gcloudignore

@@ -6,4 +6,5 @@ node_modules/
 repos/**
 **/.idea/
 *.jar
+!third_party/**/*.jar
 !/gradle/wrapper/**/*.jar

.github/workflows/codeql.yml

@@ -1,76 +0,0 @@
-name: "CodeQL"
-
-on:
-  push:
-    branches: [ 'master' ]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [ 'master' ]
-
-jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: [ 'java', 'javascript', 'python' ]
-        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
-        # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
-
-    - name: Set Java version
-      uses: actions/setup-java@v4
-      with:
-        distribution: 'temurin'
-        java-version: '21'
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
-      with:
-        languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-
-        # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-        queries: security-and-quality
-
-    # Build with Gradle
-    - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@v4
-      with:
-        build-scan-publish: true
-        build-scan-terms-of-use-url: "https://gradle.com/terms-of-service"
-        build-scan-terms-of-use-agree: "yes"
-    - name: Execute Gradle build
-      run: ./gradlew --no-daemon --no-build-cache --no-configuration-cache --rerun-tasks clean build -x test -x jIFC
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    #- name: Autobuild
-    #  uses: github/codeql-action/autobuild@v3
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
-
-    #   If the Autobuild fails above, remove it and uncomment the following three lines.
-    #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
-
-    # - run: |
-    #   echo "Run, Build Application using script"
-    #   ./location_of_script_within_repo/buildscript.sh
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
-      with:
-        category: "/language:${{matrix.language}}"

.github/workflows/dependency-submission.yml

@@ -1,25 +0,0 @@
-name: Dependency Submission
-
-on:
-  push:
-    branches: [ 'master' ]
-  schedule:
-    - cron: '24 3 * * *'
-
-permissions:
-  contents: write
-
-jobs:
-
-  dependency-submission:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout sources
-      uses: actions/checkout@v4
-    - name: Set Java version
-      uses: actions/setup-java@v4
-      with:
-        distribution: 'temurin'
-        java-version: '21'
-    - name: Generate and submit dependency graph
-      uses: gradle/actions/dependency-submission@v3

.github/workflows/do-not-merge.yml

@@ -1,23 +0,0 @@
-name: "Check labels"
-
-on:
-  pull_request:
-    branches: ["master"]
-    types:
-      - opened
-      - synchronize
-      - labeled
-      - unlabeled
-  merge_group:
-    branches: ["master"]
-    types: [checks_requested]
-
-jobs:
-  fail-by-label:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Fail if PR is labeled as "do not merge"
-        if: contains(github.event.pull_request.labels.*.name, 'do not merge')
-        run: |
-          echo "This PR is labeled as do not merge!"
-          exit 1

.gitignore

@@ -14,17 +14,11 @@ gjf.out
 *.jar
 *.war
 *.ear
+!/third_party/**/*.jar
 
 # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
 hs_err_pid*
 
-# Environment-specific configuration files
-core/src/main/java/google/registry/config/files/nomulus-config-alpha.yaml
-core/src/main/java/google/registry/config/files/nomulus-config-crash.yaml
-core/src/main/java/google/registry/config/files/nomulus-config-production.yaml
-core/src/main/java/google/registry/config/files/nomulus-config-qa.yaml
-core/src/main/java/google/registry/config/files/nomulus-config-sandbox.yaml
-
 ######################################################################
 # Eclipse Ignores
 
@@ -38,7 +32,6 @@ tmp/
 local.properties
 .settings/
 .loadpath
-.DS_Store
 
 # Eclipse Core
 .project
@@ -86,7 +79,6 @@ autogenerated/
 **/*.iml
 nomulus.ipr
 nomulus.iws
-**/classpath.index
 
 # Auto-generated java classes by Intellij
 */src/main/generated/
@@ -112,7 +104,7 @@ nomulus.iws
 .gradle/
 **/build
 cloudbuild-caches/
-**/node_modules/**
+node_modules/**
 /repos/
 
 # Compiled JS/CSS code
@@ -121,5 +113,6 @@ core/**/registrar_dbg*.js
 core/**/registrar_bin*.css
 core/**/registrar_dbg*.css
 
-# jEnv
-.java-version
+# Appengine generated files
+core/WEB-INF/appengine-generated/*.bin
+core/WEB-INF/appengine-generated/*.xml

.java-version

@@ -1 +0,0 @@
-21

.lgtm.yml

@@ -0,0 +1,6 @@
+extraction:
+  java:
+    prepare:
+      packages: "npm"
+    index:
+      java_version: "11"

CONTRIBUTORS

@@ -34,8 +34,5 @@ Guy Bensky <guyben@google.com>
 Weimin Yu <weiminyu@google.com>
 Shicong Huang <shicong@google.com>
 Gustav Brodman <gbrodman@google.com>
-Aman Sanger <sangera@google.com>
 Sarah Botwinick <sarahbot@google.com>
 Legina Chen <legina@google.com>
-Rachel Guan <rachelguan@google.com>
-Juan Celhay <jicelhay@google.com>

README.md

@@ -1,8 +1,8 @@
 # Nomulus
 
-| Internal Build | FOSS Build | License | Code Search |
-|:--------------:|:----------:|:-------:|:-----------:|
-|[![Build Status for Google Registry internal build](https://storage.googleapis.com/domain-registry-kokoro/internal/build.svg)](https://storage.googleapis.com/domain-registry-kokoro/internal/index.html)|[![Build Status for the open source build](https://storage.googleapis.com/domain-registry-kokoro/foss/build.svg)](https://storage.googleapis.com/domain-registry-kokoro/foss/index.html)|[![License for this repo](https://img.shields.io/github/license/google/nomulus.svg)](https://github.com/google/nomulus/blob/master/LICENSE)|[![Link to Code Search](https://www.gstatic.com/devopsconsole/images/oss/favicons/oss-32x32.png)](https://cs.opensource.google/nomulus/nomulus)|
+| Internal Build | FOSS Build | LGTM | License | Code Search |
+|:--------------:|:----------:|:----:|:-------:|:-----------:|
+|[![Build Status for Google Registry internal build](https://storage.googleapis.com/domain-registry-kokoro/internal/build.svg)](https://storage.googleapis.com/domain-registry-kokoro/internal/index.html)|[![Build Status for the open source build](https://storage.googleapis.com/domain-registry-kokoro/foss/build.svg)](https://storage.googleapis.com/domain-registry-kokoro/foss/index.html)|[![Total alerts](https://img.shields.io/lgtm/alerts/g/google/nomulus.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/google/nomulus/alerts/)|[![License for this repo](https://img.shields.io/github/license/google/nomulus.svg)](https://github.com/google/nomulus/blob/master/LICENSE)|[![Link to Code Search](https://www.gstatic.com/devopsconsole/images/oss/favicons/oss-32x32.png)](https://cs.opensource.google/nomulus/nomulus)|
 
 ![Nomulus logo](./nomulus-logo.png)
 
@@ -12,16 +12,16 @@ Nomulus is an open source, scalable, cloud-based service for operating
 [top-level domains](https://en.wikipedia.org/wiki/Top-level_domain) (TLDs). It
 is the authoritative source for the TLDs that it runs, meaning that it is
 responsible for tracking domain name ownership and handling registrations,
-renewals, availability checks, and WHOIS requests. End-user registrants (i.e.,
+renewals, availability checks, and WHOIS requests. End-user registrants (i.e.
 people or companies that want to register a domain name) use an intermediate
 domain name registrar acting on their behalf to interact with the registry.
 
-Nomulus runs on [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine)
-and is written primarily in Java. It is the software that
-[Google Registry](https://www.registry.google/) uses to operate TLDs such as .google,
-.app, .how, .soy, and .みんな. It can run any number of TLDs in a single shared registry
-system using horizontal scaling. Its source code is publicly available in this
-repository under the [Apache 2.0 free and open source license](https://www.apache.org/licenses/LICENSE-2.0).
+Nomulus runs on [Google App Engine][gae] and is written primarily in Java. It is
+the software that [Google Registry](https://www.registry.google/) uses to
+operate TLDs such as .google, .app, .how, .soy, and .みんな. It can run any
+number of TLDs in a single shared registry system using horizontal scaling. Its
+source code is publicly available in this repository under the [Apache 2.0 free
+and open source license](https://www.apache.org/licenses/LICENSE-2.0).
 
 ## Getting started
 
@@ -30,8 +30,8 @@ running system:
 
 *   [Install
     guide](https://github.com/google/nomulus/blob/master/docs/install.md)
-*   View the source code for the [Main HTTP server](https://github.com/google/nomulus/tree/master/core/src/main/java/google/registry)
-    and for the [EPP proxy](https://github.com/google/nomulus/tree/master/proxy/src/main/java/google/registry)
+*   View the source code for the [GAE app](https://github.com/google/nomulus/tree/master/core/src/main/java/google/registry)
+    and for the [GKE proxy](https://github.com/google/nomulus/tree/master/proxy/src/main/java/google/registry)
 *   [Other docs](https://github.com/google/nomulus/tree/master/docs)
 *   [Javadoc](https://javadoc.nomulus.foo/)
 *   [Nomulus discussion
@@ -54,11 +54,9 @@ Nomulus has the following capabilities:
     checking, updating, and transferring domain names.
 *   **[DNS](https://en.wikipedia.org/wiki/Domain_Name_System) interface**: The
     registry provides a pluggable interface that can be implemented to handle
-    different DNS providers. It includes a sample implementation using [Google
-    Cloud DNS](https://cloud.google.com/dns/), as well as an RFC 2136 compliant
-    implementation that works with BIND. If you are using Google Cloud DNS, you
-    may need to understand its capabilities and provide your own
-    multi-[AS](https://en.wikipedia.org/wiki/Autonomous_system_\(Internet\)) solution.
+    different DNS providers. It includes a sample implementation using Google
+    Cloud DNS as well as an RFC 2136 compliant implementation that works with
+    BIND.
 *   **[WHOIS](https://en.wikipedia.org/wiki/WHOIS)**: A text-based protocol that
     returns ownership and contact information on registered domain names.
 *   **[Registration Data Access Protocol
@@ -70,7 +68,7 @@ Nomulus has the following capabilities:
     provider to allow take-over by another registry operator in the event of
     serious failure. This is required by ICANN for all [new
     gTLDs](https://newgtlds.icann.org/).
-*   **Premium pricing**: Communicates prices for premium domain names (i.e.,
+*   **Premium pricing**: Communicates prices for premium domain names (i.e.
     those that are highly desirable) and supports configurable premium
     registration and renewal prices. An extensible interface allows fully
     programmatic pricing.
@@ -93,50 +91,56 @@ Nomulus has the following capabilities:
 *   **Administrative tool**: Performs the full range of administrative tasks
     needed to manage a running registry system, including creating and
     configuring new TLDs.
-*   **Secure storage of cryptographic keys**: A keyring interface is
-      provided for plugging in your own implementation (see [configuration
-      doc](https://github.com/google/nomulus/blob/master/docs/configuration.md)
-      for details), and an implementation based on
-      [Google Cloud Secret Manager](https://cloud.google.com/security/products/secret-manager) is
-      available.
-*   **TPC Proxy**: Nomulus is built on top of the [Jetty](https://jetty.org/)
-    container that implements the [Jakarta Servlet](https://jakarta.ee/specifications/servlet/)
-    specification and only serves HTTP/S traffic. A proxy to translate raw TCP traffic (e.g., EPP)
-    to and from HTTP is provided.
-    Instructions on setting up the proxy
-    are [available](https://github.com/google/nomulus/blob/master/docs/proxy-setup.md).
-    The proxy can either run in a separate cluster and communicate to Nomulus public HTTP
-    endpoints via the Internet, or as a sidecar with the Nomulus image in the same pod and
-    communicate to it via loopback.
+*   **DNS interface**: An interface for DNS operations is provided so you can
+    write an implementation for your chosen provider, along with a sample
+    implementation that uses [Google Cloud DNS](https://cloud.google.com/dns/).
+    If you are using Google Cloud DNS you may need to understand its
+    capabilities and provide your own
+    multi-[AS](https://en.wikipedia.org/wiki/Autonomous_system_\(Internet\))
+    solution.
+*   **GAE Proxy**: App Engine Standard only serves HTTP/S traffic. A proxy to
+    forward traffic on EPP and WHOIS ports to App Engine via HTTPS is provided.
+    Instructions on setting up the proxy on
+    [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/)
+    is [available](https://github.com/google/nomulus/blob/master/docs/proxy-setup.md).
+    Running the proxy on GKE supports IPv4 and IPv6 access, per ICANN's
+    requirements for gTLDs. The proxy can also run as a single jar file, or on
+    other Kubernetes providers, with modifications.
 
 ## Additional components
 
 Registry operators interested in deploying Nomulus will likely require some
-additional components that need to be configured separately.
+additional components that are need to be configured separately.
 
 *   A way to invoice registrars for domain name registrations and accept
     payments. Nomulus records the information required to generate invoices in
     [billing
     events](https://github.com/google/nomulus/blob/master/docs/code-structure.md#billing-events).
 *   Fully automated reporting to meet ICANN's requirements for gTLDs. Nomulus
-    includes substantial reporting functionality, but some additional work will
+    includes substantial reporting functionality but some additional work will
     be required by the operator in this area.
-
+*   A secure method for storing cryptographic keys. A keyring interface is
+    provided for plugging in your own implementation (see [configuration
+    doc](https://github.com/google/nomulus/blob/master/docs/configuration.md)
+    for details).
 *   System status and uptime monitoring.
 
 ## Outside references
 
-*   [Identity Digital](http://identity.digital) has helped review the code and
-    provided valuable feedback.
+*   [Donuts](http://donuts.domains) Registry has helped review the code and
+    provided valuable feedback
 *   [CoCCa](http://cocca.org.nz) and [FRED](https://fred.nic.cz) are other
-    open-source registry platforms in use by many TLDs.
+    open-source registry platforms in use by many TLDs
 *   We are not aware of any fully open source domain registrar projects, but
     open source EPP Toolkits (not yet tested with Nomulus; may require
     integration work) include:
-    *   [Universal Registry/Registrar Toolkit](https://sourceforge.net/projects/epp-rtk/)
+    *   [EPP RTK Project](http://epp-rtk.sourceforge.net/)
+    *   [CentralNic](https://www.centralnic.com/registry/labs)
     *   [ari-toolkit](https://github.com/AusRegistry/ari-toolkit)
     *   [Net::DRI](https://metacpan.org/pod/Net::DRI)
 *   Some Open Source DNS Projects that may be useful, but which we have not
     tested:
-    *   [AtomiaDNS](https://github.com/atomia/atomiadns)
-    *   [PowerDNS](https://github.com/PowerDNS/pdns)
+    *   [AtomiaDNS](http://atomiadns.com/)
+    *   [PowerDNS](https://doc.powerdns.com/md/)
+
+[gae]:https://cloud.google.com/appengine/docs/about-the-standard-environment

appengine_war.gradle

@@ -0,0 +1,110 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+apply plugin: 'war'
+
+def environment = rootProject.environment
+def gcpProject = rootProject.gcpProject
+
+// Set this directory before applying the appengine plugin so that the
+// plugin will recognize this as an app-engine standard app (and also
+// obtains the appengine-web.xml from the correct location)
+project.convention.plugins['war'].webAppDirName =
+        "../../core/src/main/java/google/registry/env/${environment}/${project.name}"
+
+apply plugin: 'com.google.cloud.tools.appengine'
+
+def coreResourcesDir = "${rootDir}/core/build/resources/main"
+
+// Get the web.xml file for the service.
+war {
+    webInf {
+        from "../../core/src/main/java/google/registry/env/common/${project.name}/WEB-INF"
+    }
+}
+
+war {
+    from("${coreResourcesDir}/google/registry/ui/html") {
+        include "*.html"
+    }
+}
+
+if (project.path == ":services:default") {
+    war {
+        from("${coreResourcesDir}/google/registry/ui") {
+            include "registrar_bin.js"
+            if (environment != "production") {
+                include "registrar_bin.js.map"
+            }
+            into("assets/js")
+        }
+        from("${coreResourcesDir}/google/registry/ui/css") {
+            include "registrar*"
+            into("assets/css")
+        }
+        from("${coreResourcesDir}/google/registry/ui/assets/images") {
+            include "**/*"
+            into("assets/images")
+        }
+    }
+}
+
+appengine {
+    deploy {
+        // appengineDeployAll task requires the version to be set. So,
+        // this config lets gcloud select a version name when deploying
+        // to alpha or sandbox from our workstation.
+        if (!rootProject.prodOrSandboxEnv) {
+            version = 'GCLOUD_CONFIG'
+        }
+
+        // Don't set gcpProject directly, it gets overriden in ./build.gradle.
+        // Do -P environment={crash,alpha} instead.  For sandbox/production,
+        // use Spinnaker.
+        projectId = gcpProject
+    }
+}
+
+dependencies {
+    compile project(path: ':core', configuration: 'deploy_jar')
+}
+
+// The tools.jar file gets pulled in from the java environment and for some
+// reason gets exploded "readonly", causing subsequent builds to fail when
+// they can't overwrite it.  The hack below makes the file writable after
+// we're done exploding it.
+//
+// Fun fact: We only use this jar for documentation generation and as such we
+// don't need it in our warfile, as it is not used by the application at
+// runtime.  But it's not clear how to exclude it, as we seem to be
+// constructing the jar from the entire WEB-INF directory and per-file
+// exclude rules don't seem to work on it.  Better solutions are welcome :-)
+explodeWar.doLast {
+    file("${it.explodedAppDirectory}/WEB-INF/lib/tools.jar").setWritable(true)
+}
+
+rootProject.deploy.dependsOn appengineDeployAll
+rootProject.stage.dependsOn appengineStage
+
+// Impose verification for all of the deployment tasks.  We haven't found a
+// better way to do this other than to apply to each of them independently.
+// If a new task gets added, it will still fail if "environment"  is not defined
+// because gcpProject is null.  We just won't get as friendly an error message.
+appengineDeployAll.configure rootProject.verifyDeploymentConfig
+appengineDeploy.configure rootProject.verifyDeploymentConfig
+appengineDeployCron.configure rootProject.verifyDeploymentConfig
+appengineDeployDispatch.configure rootProject.verifyDeploymentConfig
+appengineDeployDos.configure rootProject.verifyDeploymentConfig
+appengineDeployIndex.configure rootProject.verifyDeploymentConfig
+appengineDeployQueue.configure rootProject.verifyDeploymentConfig

build.gradle

@@ -29,65 +29,92 @@ buildscript {
 
   dependencies {
     classpath 'com.google.cloud.tools:appengine-gradle-plugin:2.4.1'
-    classpath 'net.ltgt.gradle:gradle-errorprone-plugin:3.1.0'
+    classpath 'net.ltgt.gradle:gradle-errorprone-plugin:0.6.1'
     classpath 'org.sonatype.aether:aether-api:1.13.1'
     classpath 'org.sonatype.aether:aether-impl:1.13.1'
   }
 }
 
 plugins {
-  // Java static analysis plugins.
-
-  // Re-enable when compatible with Gradle 8
-  // id 'nebula.lint' version '16.0.2'
-  id 'net.ltgt.errorprone' version '3.1.0'
+  // Java static analysis plugins. Keep versions consistent with
+  // ./buildSrc/build.gradle
+  id 'nebula.lint' version '16.0.2'
+  id 'net.ltgt.errorprone' version '0.6.1'
   id 'checkstyle'
-  id 'com.github.johnrengelman.shadow' version '8.1.1'
+  id 'com.github.johnrengelman.shadow' version '5.1.0'
 
   // NodeJs plugin
   id "com.github.node-gradle.node" version "3.0.1"
 
   id 'idea'
-  id 'com.diffplug.spotless' version '6.20.0'
+  id 'com.diffplug.gradle.spotless' version '3.25.0'
 
   id 'jacoco'
   id 'com.dorongold.task-tree' version '2.1.0'
 }
 
-dependencyLocking {
-    lockAllConfigurations()
-}
-
 node {
-  download = false
-  version = "22.7.0"
+  download = true
+  version = "16.14.0"
+  npmVersion = "6.14.11"
 }
 
 wrapper {
   distributionType = Wrapper.DistributionType.ALL
 }
 
+apply plugin: google.registry.gradle.plugin.ReportUploaderPlugin
+
+reportUploader {
+  // Set the location where we want to upload the build results.
+  // e.g. -P uploaderDestination=gcs://domain-registry-alpha-build-result-test
+  //
+  // If not set - the upload will be skipped
+  destination = uploaderDestination
+
+  // The location of the file containing the OAuth2 Google Cloud credentials.
+  //
+  // The file can contain a Service Account key file in JSON format from the
+  // Google Developers Console or a stored user credential using the format
+  // supported by the Cloud SDK.
+  //
+  // If no file is given - the default credentials are used.
+  credentialsFile = uploaderCredentialsFile
+
+  // If set to 'yes', each file will be uploaded to GCS in a separate thread.
+  // This is MUCH faster.
+  multithreadedUpload = uploaderMultithreadedUpload
+}
+
 apply from: 'dependencies.gradle'
 
 apply from: 'dependency_lic.gradle'
 
 apply from: 'utils.gradle'
 
+// Custom task to run checkLicense in buildSrc, which is not triggered
+// by root project tasks. A shell task is used because buildSrc tasks
+// cannot be referenced in the same way as tasks from a regular included
+// build.
+task checkBuildSrcLicense(type:Exec) {
+  workingDir "${rootDir}/buildSrc"
+  commandLine '../gradlew', 'checkLicense'
+}
+tasks.checkLicense.dependsOn(tasks.checkBuildSrcLicense)
 tasks.build.dependsOn(tasks.checkLicense)
 
 // Provide defaults for all of the project properties.
 
 // Only do linting if the build is successful.
-// Re-enable when compatible with Gradle 8
-// gradleLint.autoLintAfterFailure = false
+gradleLint.autoLintAfterFailure = false
 
 // Paths to main and test sources.
 ext.projectRootDir = "${rootDir}"
 
-// Tasks to deploy/stage all services
+// Tasks to deploy/stage all App Engine services
 task deploy {
   group = 'deployment'
-  description = 'Deploys all services.'
+  description = 'Deploys all services to App Engine.'
 }
 
 task stage {
@@ -95,27 +122,30 @@ task stage {
   description = 'Generates application directories for all services.'
 }
 
+// App-engine environment configuration.  We set up all of the variables in
+// the root project.
+
+def environments = ['production', 'sandbox', 'alpha', 'crash', 'qa']
+
 def gcpProject = null
 
 apply from: "${rootDir.path}/projects.gradle"
 
 if (environment == '') {
-    // Keep the project null, this will prevent deployment. Set the
+    // Keep the project null, this will prevent deployment.  Set the
     // environment to "alpha" because other code needs this property to
     // explode the war file.
     environment = 'alpha'
-} else {
+} else if (environment != 'production' && environment != 'sandbox') {
     gcpProject = projects[environment]
     if (gcpProject == null) {
         throw new GradleException("-Penvironment must be one of " +
                                   "${projects.keySet()}.")
     }
-    project(':console-webapp').setProperty('configuration', environment)
 }
 
 rootProject.ext.environment = environment
 rootProject.ext.gcpProject = gcpProject
-rootProject.ext.baseDomain = baseDomains[environment]
 rootProject.ext.prodOrSandboxEnv = environment in ['production', 'sandbox']
 
 // Function to verify that the deployment parameters have been set.
@@ -129,7 +159,7 @@ def verifyDeploymentParams() {
         System.err.println('-----------------------------------------------------------------')
         throw new GradleException('Aborting. See prominent error above.')
     } else if (gcpProject == null) {
-        def error = 'You must specify -Penvironment={alpha,crash,qa}'
+        def error = 'You must specify -P environment={alpha,crash,qa}'
         System.err.println("\033[33;1m${error}\033[0m")
         throw GradleException("Aborting:  ${error}")
     }
@@ -142,9 +172,6 @@ rootProject.ext.verifyDeploymentConfig = {
 
 // Subproject configuration.
 
-// Alias this since it collides with the closure variable name
-def allowInsecure = allowInsecureProtocol
-
 allprojects {
   // Skip no-op project
   if (project.name == 'services') return
@@ -154,7 +181,6 @@ allprojects {
       maven {
         println "Java dependencies: Using repo ${mavenUrl}..."
         url mavenUrl
-        allowInsecureProtocol = allowInsecure == "true"
       }
     } else {
       println "Java dependencies: Using Maven Central..."
@@ -174,31 +200,7 @@ allprojects {
       tasks.withType(JavaCompile) {
         options.fork = true
         options.forkOptions.executable =
-          file("${System.env.JAVA_HOME}/bin/javac")
-        options.compilerArgs = ["--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.main=ALL-UNNAMED",
-                                "--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.comp=ALL-UNNAMED",
-                                "--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED",
-                                "--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED",
-                                "--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.code=ALL-UNNAMED",
-                                "--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.processing=ALL-UNNAMED",
-                                "--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED",
-                                "--add-exports",
-                                "jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED"]
-        options.forkOptions.jvmArgs = ["-J--add-exports=jdk.compiler/com.sun.tools.javac.main=ALL-UNNAMED",
-                                       "-J--add-exports=jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED",
-                                       "-J--add-exports=jdk.compiler/com.sun.tools.javac.comp=ALL-UNNAMED",
-                                       "-J--add-exports=jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED",
-                                       "-J--add-exports=jdk.compiler/com.sun.tools.javac.code=ALL-UNNAMED",
-                                       "-J--add-exports=jdk.compiler/com.sun.tools.javac.processing=ALL-UNNAMED",
-                                       "-J--add-exports=jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED",
-                                       "-J--add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED"]
+            "${project.rootDir}/kythe/extractors/javac-wrapper.sh"
       }
     }
   }
@@ -245,12 +247,6 @@ def javadocSource = []
 def javadocClasspath = []
 def javadocDependentTasks = []
 
-def services = [':services:default',
-                ':services:backend',
-                ':services:bsa',
-                ':services:tools',
-                ':services:pubapi']
-
 subprojects {
   // Skip no-op project
   if (project.name == 'services') return
@@ -265,19 +261,14 @@ subprojects {
     project.tasks.create(
         taskName, com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar) {
       mergeServiceFiles()
-      archiveBaseName = binaryName
+      baseName = binaryName
       if (mainClass != '') {
         manifest {
           attributes 'Main-Class': mainClass
         }
       }
-      // Build as a multi-release jar since we've got member jars (e.g., dnsjava
-      // and snakeyaml) that are multi-release.
-      manifest {
-        attributes 'Multi-Release': true
-      }
       zip64 = true
-      archiveClassifier = ''
+      classifier = ''
       archiveVersion = ''
       configurations = configs
       from srcOutput
@@ -287,11 +278,6 @@ subprojects {
       // see https://discuss.gradle.org/t/signing-a-custom-gradle-plugin-thats-downloaded-by-the-build-system-from-github/1365
       exclude "META-INF/*.SF", "META-INF/*.DSA", "META-INF/*.RSA"
       exclude excludes
-
-      // We do seem to get duplicates when constructing uber-jars, either
-      // this is a product of something in gradle 7 or a product of gradle 7
-      // now giving an error about them when it didn't previously.
-      duplicatesStrategy DuplicatesStrategy.WARN
     }
   }
 
@@ -310,7 +296,7 @@ subprojects {
       // The ':integration' project runs server/schema integration tests using
       // dynamically specified jars with no transitive dependency. Therefore
       // dependency-locking does not make sense. Furthermore, during
-      // evaluation it resolves the 'testRuntimeOnly' configuration, making it
+      // evaluation it resolves the 'testRuntime' configuration, making it
       // immutable. Locking activation would trigger an invalid operation
       // exception.
       //
@@ -329,20 +315,23 @@ subprojects {
     }
   }
 
+  def services = [':services:default',
+                  ':services:backend',
+                  ':services:tools',
+                  ':services:pubapi']
+
   // Set up all of the deployment projects.
   if (services.contains(project.path)) {
+
+    apply from: "${rootDir.path}/appengine_war.gradle"
+
     // Return early, do not apply the settings below.
     return
   }
 
   apply from: "${rootDir.path}/java_common.gradle"
 
-  // When changing Java version here, be sure to update BEAM Java runtime:
-  // search for `flex-template-base-image` and update the parameter value.
-  // There are at least two instances, one in core/build.gradle, one in
-  // release/stage_beam_pipeline.sh
-  sourceCompatibility = JavaVersion.VERSION_21
-  targetCompatibility = JavaVersion.VERSION_21
+  if (project.name == 'third_party') return
 
   project.tasks.test.dependsOn runPresubmits
 
@@ -367,9 +356,9 @@ subprojects {
     }
   }
 
-  // No need to produce javadoc for the jetty subproject, which has no APIs to
+  // No need to produce javadoc for the docs subproject, which has no APIs to
   // expose to users.
-  if (project.name != 'jetty') {
+  if (project.name != 'docs') {
     javadocSource << project.sourceSets.main.allJava
     javadocClasspath << project.sourceSets.main.runtimeClasspath
     javadocClasspath << "${buildDir}/generated/sources/annotationProcessor/java/main"
@@ -407,6 +396,9 @@ if (verboseTestOutput.toBoolean()) {
 }
 
 task checkDependenciesDotGradle {
+  def buildSrcDepsFile = File.createTempFile('buildSrc', 'deps')
+  buildSrcDepsFile.deleteOnExit()
+  dependsOn createGetBuildSrcDirectDepsTask(buildSrcDepsFile)
 
   doLast {
     Set<String> depsInUse = []
@@ -419,7 +411,9 @@ task checkDependenciesDotGradle {
         }
       }
     }
-
+    if (buildSrcDepsFile.exists()) {
+      depsInUse.addAll(buildSrcDepsFile.readLines())
+    }
     def unusedDeps =
         rootProject.dependencyMap.keySet()
             .findAll { !depsInUse.contains(it) }
@@ -436,23 +430,34 @@ task checkDependenciesDotGradle {
 }
 tasks.build.dependsOn(tasks.checkDependenciesDotGradle)
 
+def createGetBuildSrcDirectDepsTask(outputFileName) {
+  return tasks
+      .create(
+          "getBuildSrcDeps_${java.util.UUID.randomUUID()}".toString(),
+          Exec) {
+    workingDir "${rootDir}/buildSrc"
+    commandLine '../gradlew', 'exportDependencies',
+                "-PdependencyExportFile=${outputFileName}"
+  }
+}
+
 rootProject.ext {
   invokeJavaDiffFormatScript = { action ->
-    def javaHome = project.findProperty('org.gradle.java.home')
-    def javaBin
-    if (javaHome != null) {
-      javaBin = "$javaHome/bin/java"
-    } else {
-      javaBin = ext.execInBash("which java", rootDir)
-    }
-    println("Running the formatting tool with $javaBin")
-    def scriptDir = "${rootDir}/java-format"
-    def workingDir = rootDir
+    println("JAVA_HOME=${System.env.JAVA_HOME}")
+    println("PATH=${System.env.PATH}")
+    println(ext.execInBash("type java", "${rootDir}"))
+    println(ext.execInBash("java -version", "${rootDir}"))
+    def scriptDir = rootDir.path.endsWith('buildSrc')
+            ? "${rootDir}/../java-format"
+            : "${rootDir}/java-format"
+    def workingDir = rootDir.path.endsWith('buildSrc')
+            ? "${rootDir}/.."
+            : rootDir
     def formatDiffScript = "${scriptDir}/google-java-format-git-diff.sh"
     def pythonExe = getPythonExecutable()
 
     return ext.execInBash(
-        "JAVA=${javaBin} PYTHON=${pythonExe} ${formatDiffScript} ${action}", "${workingDir}")
+        "PYTHON=${pythonExe} ${formatDiffScript} ${action}", "${workingDir}")
   }
 }
 
@@ -499,17 +504,11 @@ task javaIncrementalFormatApply {
 
 task javadoc(type: Javadoc) {
   source javadocSource
-  // Java 11.0.17 has the following bug that affects annotation handling on
-  // package-info.java:
-  // https://bugs.openjdk.org/browse/JDK-8222091
-  exclude "**/package-info.java"
   classpath = files(javadocClasspath)
   destinationDir = file("${buildDir}/docs/javadoc")
   options.encoding = "UTF-8"
   // In a lot of places we don't write @return so suppress warnings about that.
-  // We don't report HTML lint errors because XJB-generated POJO files have
-  // incorrect tags (like dangling </p> without the corresponding open tag.
-  options.addBooleanOption('Xdoclint:all,-missing,-html', true)
+  options.addBooleanOption('Xdoclint:all,-missing', true)
   options.addBooleanOption("-allow-script-in-comments",true)
   options.tags = ["type:a:Generic Type",
                   "error:a:Expected Error",
@@ -523,7 +522,6 @@ tasks.build.dependsOn(tasks.javadoc)
 // core Nomulus codebase, and runs all presubmits.
 task coreDev {
   dependsOn 'javaIncrementalFormatApply'
-  dependsOn 'console-webapp:applyFormatting'
   dependsOn 'javadoc'
   dependsOn 'checkDependenciesDotGradle'
   dependsOn 'checkLicense'
@@ -533,31 +531,6 @@ task coreDev {
 
 javadocDependentTasks.each { tasks.javadoc.dependsOn(it) }
 
-// Runs the script, which deploys cloud scheduler and tasks based on the config
-task deployCloudSchedulerAndQueue {
-  doLast {
-    def env = environment
-    if (!prodOrSandboxEnv) {
-      exec {
-        workingDir "${rootDir}/release/builder/"
-        commandLine 'go', 'run',
-                "./deployCloudSchedulerAndQueue.go",
-                "${rootDir}/core/src/main/java/google/registry/config/files/nomulus-config-${env}.yaml",
-                "${rootDir}/core/src/main/java/google/registry/config/files/tasks/cloud-scheduler-tasks-${env}.xml",
-                "domain-registry-${env}"
-      }
-      exec {
-        workingDir "${rootDir}/release/builder/"
-        commandLine 'go', 'run',
-                "./deployCloudSchedulerAndQueue.go",
-                "${rootDir}/core/src/main/java/google/registry/config/files/nomulus-config-${env}.yaml",
-                "${rootDir}/core/src/main/java/google/registry/config/files/cloud-tasks-queue.xml",
-                "domain-registry-${env}"
-      }
-    }
-  }
-}
-
 // disable javadoc in subprojects, these will break because they don't have
 // the correct classpath (see above).
 gradle.taskGraph.whenReady { graph ->

buildSrc/build.gradle

@@ -0,0 +1,112 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+import static com.google.common.base.Strings.isNullOrEmpty;
+
+buildscript {
+  if (project.enableDependencyLocking.toBoolean()) {
+    // Lock buildscript dependencies.
+    configurations.classpath {
+      resolutionStrategy.activateDependencyLocking()
+    }
+  }
+}
+
+plugins {
+  // Java static analysis plugins. Keep versions consistent with ../build.gradle
+  id 'nebula.lint' version '16.0.2'
+  id 'net.ltgt.errorprone' version '0.6.1'
+  id 'checkstyle'
+  id 'com.diffplug.gradle.spotless' version '3.25.0'
+}
+
+if (rootProject.enableDependencyLocking.toBoolean()) {
+  // Lock application dependencies.
+  dependencyLocking {
+    lockAllConfigurations()
+  }
+}
+
+repositories {
+  if (isNullOrEmpty(project.ext.properties.mavenUrl)) {
+    println "Java dependencies: Using Maven central..."
+    mavenCentral()
+    google()
+  } else {
+    maven {
+      println "Java dependencies: Using repo ${mavenUrl}..."
+      url mavenUrl
+    }
+  }
+}
+
+apply from: '../dependencies.gradle'
+apply from: '../dependency_lic.gradle'
+apply from: '../java_common.gradle'
+
+sourceSets {
+  main {
+    java {
+      srcDirs += "${project.buildDir}/generated/source/apt/main"
+    }
+  }
+}
+
+checkstyle {
+  configDir file('../config/checkstyle')
+}
+
+dependencies {
+  def deps = dependencyMap
+  compile deps['com.google.auth:google-auth-library-credentials']
+  compile deps['com.google.auth:google-auth-library-oauth2-http']
+  compile deps['com.google.auto.value:auto-value-annotations']
+  compile deps['com.google.common.html.types:types']
+  compile deps['com.google.cloud:google-cloud-core']
+  compile deps['com.google.cloud:google-cloud-storage']
+  compile deps['com.google.guava:guava']
+  compile deps['com.google.protobuf:protobuf-java']
+  compile deps['com.google.template:soy']
+  compile deps['org.apache.commons:commons-text']
+  annotationProcessor deps['com.google.auto.value:auto-value']
+  testCompile deps['com.google.truth:truth']
+  testCompile deps['com.google.truth.extensions:truth-java8-extension']
+  testCompile deps['org.junit.jupiter:junit-jupiter-api']
+  testCompile deps['org.junit.jupiter:junit-jupiter-engine']
+  testCompile deps['org.mockito:mockito-core']
+}
+
+gradle.projectsEvaluated {
+  tasks.withType(JavaCompile) {
+    options.compilerArgs << "-Xlint:unchecked"
+  }
+}
+
+task exportDependencies {
+  def outputFileProperty = 'dependencyExportFile'
+  def output = project.hasProperty(outputFileProperty)
+      ? new PrintStream(
+          new File(project.getProperty(outputFileProperty)))
+      : System.out
+
+  doLast {
+    project.configurations.all {
+      it.dependencies.findAll {
+        it.group != null
+      }.each {
+        output.println("${it.group}:${it.name}")
+      }
+    }
+  }
+}

buildSrc/gradle.properties

@@ -0,0 +1 @@
+enableDependencyLocking=true

buildSrc/gradle/dependency-locks/annotationProcessor.lockfile

@@ -0,0 +1,28 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.github.ben-manes.caffeine:caffeine:2.7.0
+com.github.kevinstern:software-and-algorithms:1.0
+com.google.auto.value:auto-value:1.7.4
+com.google.auto:auto-common:0.10
+com.google.code.findbugs:jFormatString:3.0.0
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotation:2.3.4
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.errorprone:error_prone_check_api:2.3.4
+com.google.errorprone:error_prone_core:2.3.4
+com.google.errorprone:error_prone_type_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.0.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.1
+com.google.protobuf:protobuf-java:3.4.0
+com.googlecode.java-diff-utils:diffutils:1.3.0
+org.checkerframework:checker-qual:3.0.0
+org.checkerframework:dataflow:3.0.0
+org.checkerframework:javacutil:3.0.0
+org.codehaus.mojo:animal-sniffer-annotations:1.17
+org.pcollections:pcollections:2.1.2
+org.plumelib:plume-util:1.0.6
+org.plumelib:reflection-util:0.0.2
+org.plumelib:require-javadoc:0.1.0

buildSrc/gradle/dependency-locks/buildscript-classpath.lockfile

@@ -0,0 +1,51 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.diffplug.durian:durian-collect:1.2.0
+com.diffplug.durian:durian-core:1.2.0
+com.diffplug.durian:durian-io:1.2.0
+com.diffplug.gradle.spotless:com.diffplug.gradle.spotless.gradle.plugin:3.25.0
+com.diffplug.spotless:spotless-lib-extra:1.25.0
+com.diffplug.spotless:spotless-lib:1.25.0
+com.diffplug.spotless:spotless-plugin-gradle:3.25.0
+com.google.guava:guava:19.0
+com.googlecode.concurrent-trees:concurrent-trees:2.6.1
+com.googlecode.javaewah:JavaEWAH:1.1.6
+com.jcraft:jsch:0.1.55
+com.jcraft:jzlib:1.1.1
+com.netflix.nebula:gradle-lint-plugin:16.0.2
+com.netflix.nebula:nebula-gradle-interop:1.0.11
+commons-lang:commons-lang:2.6
+javax.inject:javax.inject:1
+junit:junit:4.12
+nebula.lint:nebula.lint.gradle.plugin:16.0.2
+net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin:0.6.1
+net.ltgt.gradle:gradle-errorprone-plugin:0.6.1
+org.apache.commons:commons-lang3:3.8.1
+org.apache.maven:maven-artifact:3.6.2
+org.apache.maven:maven-builder-support:3.6.2
+org.apache.maven:maven-model-builder:3.6.2
+org.apache.maven:maven-model:3.6.2
+org.bouncycastle:bcpg-jdk15on:1.61
+org.bouncycastle:bcpkix-jdk15on:1.61
+org.bouncycastle:bcprov-jdk15on:1.61
+org.codehaus.gpars:gpars:1.2.1
+org.codehaus.groovy:groovy-xml:2.4.7
+org.codehaus.groovy:groovy:2.4.7
+org.codehaus.jsr166-mirror:jsr166y:1.7.0
+org.codehaus.plexus:plexus-interpolation:1.25
+org.codehaus.plexus:plexus-utils:3.2.1
+org.eclipse.jgit:org.eclipse.jgit:5.5.0.201909110433-r
+org.eclipse.sisu:org.eclipse.sisu.inject:0.3.3
+org.hamcrest:hamcrest-core:1.3
+org.jetbrains.kotlin:kotlin-stdlib-common:1.3.50
+org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.3.50
+org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.3.50
+org.jetbrains.kotlin:kotlin-stdlib:1.3.50
+org.jetbrains:annotations:13.0
+org.multiverse:multiverse-core:0.7.0
+org.ow2.asm:asm-analysis:7.1
+org.ow2.asm:asm-commons:7.1
+org.ow2.asm:asm-tree:7.1
+org.ow2.asm:asm:7.1
+org.slf4j:slf4j-api:1.7.2

buildSrc/gradle/dependency-locks/checkstyle.lockfile

@@ -0,0 +1,19 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+antlr:antlr:2.7.7
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:29.0-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.puppycrawl.tools:checkstyle:8.37
+commons-beanutils:commons-beanutils:1.9.4
+commons-collections:commons-collections:3.2.2
+info.picocli:picocli:4.5.2
+net.sf.saxon:Saxon-HE:10.3
+org.antlr:antlr4-runtime:4.8-1
+org.checkerframework:checker-qual:2.11.1
+org.javassist:javassist:3.26.0-GA
+org.reflections:reflections:0.9.12

buildSrc/gradle/dependency-locks/compile.lockfile

@@ -0,0 +1,63 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.8.0
+org.json:json:20160212
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:7.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/compileClasspath.lockfile

@@ -0,0 +1,63 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.8.0
+org.json:json:20160212
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:7.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/deploy_jar.lockfile

@@ -0,0 +1,63 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.8.0
+org.json:json:20160212
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:7.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/jacocoAgent.lockfile

@@ -0,0 +1,4 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+org.jacoco:org.jacoco.agent:0.8.6

buildSrc/gradle/dependency-locks/jacocoAnt.lockfile

@@ -0,0 +1,11 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+org.jacoco:org.jacoco.agent:0.8.6
+org.jacoco:org.jacoco.ant:0.8.6
+org.jacoco:org.jacoco.core:0.8.6
+org.jacoco:org.jacoco.report:0.8.6
+org.ow2.asm:asm-analysis:8.0.1
+org.ow2.asm:asm-commons:8.0.1
+org.ow2.asm:asm-tree:8.0.1
+org.ow2.asm:asm:8.0.1

buildSrc/gradle/dependency-locks/runtime.lockfile

@@ -0,0 +1,63 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.8.0
+org.json:json:20160212
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:7.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/runtimeClasspath.lockfile

@@ -0,0 +1,63 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.8.0
+org.json:json:20160212
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:7.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/testAnnotationProcessor.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.github.ben-manes.caffeine:caffeine:2.7.0
+com.github.kevinstern:software-and-algorithms:1.0
+com.google.auto:auto-common:0.10
+com.google.code.findbugs:jFormatString:3.0.0
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotation:2.3.4
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.errorprone:error_prone_check_api:2.3.4
+com.google.errorprone:error_prone_core:2.3.4
+com.google.errorprone:error_prone_type_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.0.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.1
+com.google.protobuf:protobuf-java:3.4.0
+com.googlecode.java-diff-utils:diffutils:1.3.0
+org.checkerframework:checker-qual:3.0.0
+org.checkerframework:dataflow:3.0.0
+org.checkerframework:javacutil:3.0.0
+org.codehaus.mojo:animal-sniffer-annotations:1.17
+org.pcollections:pcollections:2.1.2
+org.plumelib:plume-util:1.0.6
+org.plumelib:reflection-util:0.0.2
+org.plumelib:require-javadoc:0.1.0

buildSrc/gradle/dependency-locks/testCompile.lockfile

@@ -0,0 +1,78 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.google.truth.extensions:truth-java8-extension:1.1.2
+com.google.truth:truth:1.1.2
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+junit:junit:4.13.1
+net.bytebuddy:byte-buddy-agent:1.10.19
+net.bytebuddy:byte-buddy:1.10.19
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.json:json:20160212
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.mockito:mockito-core:3.7.7
+org.objenesis:objenesis:3.1
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:9.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/testCompileClasspath.lockfile

@@ -0,0 +1,78 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.google.truth.extensions:truth-java8-extension:1.1.2
+com.google.truth:truth:1.1.2
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+junit:junit:4.13.1
+net.bytebuddy:byte-buddy-agent:1.10.19
+net.bytebuddy:byte-buddy:1.10.19
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.json:json:20160212
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.mockito:mockito-core:3.7.7
+org.objenesis:objenesis:3.1
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:9.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/testRuntime.lockfile

@@ -0,0 +1,78 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.google.truth.extensions:truth-java8-extension:1.1.2
+com.google.truth:truth:1.1.2
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+junit:junit:4.13.1
+net.bytebuddy:byte-buddy-agent:1.10.19
+net.bytebuddy:byte-buddy:1.10.19
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.json:json:20160212
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.mockito:mockito-core:3.7.7
+org.objenesis:objenesis:3.1
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:9.0
+org.threeten:threetenbp:1.5.0

buildSrc/gradle/dependency-locks/testRuntimeClasspath.lockfile

@@ -0,0 +1,78 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+aopalliance:aopalliance:1.0
+args4j:args4j:2.0.23
+com.fasterxml.jackson.core:jackson-core:2.12.1
+com.fasterxml.jackson:jackson-bom:2.12.1
+com.google.api-client:google-api-client:1.31.2
+com.google.api.grpc:proto-google-common-protos:2.1.0
+com.google.api.grpc:proto-google-iam-v1:1.0.10
+com.google.api:api-common:1.10.1
+com.google.api:gax-httpjson:0.79.0
+com.google.api:gax:1.62.0
+com.google.apis:google-api-services-storage:v1-rev20210127-1.31.0
+com.google.auth:google-auth-library-credentials:0.24.1
+com.google.auth:google-auth-library-oauth2-http:0.24.1
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.cloud:google-cloud-core-http:1.94.1
+com.google.cloud:google-cloud-core:1.94.3
+com.google.cloud:google-cloud-storage:1.113.12
+com.google.code.findbugs:jsr305:3.0.2
+com.google.code.gson:gson:2.8.6
+com.google.common.html.types:types:1.0.6
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.escapevelocity:escapevelocity:0.9.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.http-client:google-http-client-apache-v2:1.39.0
+com.google.http-client:google-http-client-appengine:1.39.0
+com.google.http-client:google-http-client-gson:1.39.0
+com.google.http-client:google-http-client-jackson2:1.39.0
+com.google.http-client:google-http-client:1.39.0
+com.google.inject.extensions:guice-multibindings:4.1.0
+com.google.inject:guice:4.1.0
+com.google.j2objc:j2objc-annotations:1.3
+com.google.jsinterop:jsinterop-annotations:1.0.1
+com.google.oauth-client:google-oauth-client:1.31.4
+com.google.protobuf:protobuf-java-util:3.15.3
+com.google.protobuf:protobuf-java:3.15.3
+com.google.template:soy:2021-02-01
+com.google.truth.extensions:truth-java8-extension:1.1.2
+com.google.truth:truth:1.1.2
+com.ibm.icu:icu4j:57.1
+commons-codec:commons-codec:1.11
+commons-logging:commons-logging:1.2
+io.grpc:grpc-context:1.36.0
+io.opencensus:opencensus-api:0.28.0
+io.opencensus:opencensus-contrib-http-util:0.28.0
+javax.annotation:javax.annotation-api:1.3.2
+javax.annotation:jsr250-api:1.0
+javax.inject:javax.inject:1
+junit:junit:4.13.1
+net.bytebuddy:byte-buddy-agent:1.10.19
+net.bytebuddy:byte-buddy:1.10.19
+org.apache.commons:commons-lang3:3.8.1
+org.apache.commons:commons-text:1.6
+org.apache.httpcomponents:httpclient:4.5.13
+org.apache.httpcomponents:httpcore:4.4.14
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.5
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.json:json:20160212
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.mockito:mockito-core:3.7.7
+org.objenesis:objenesis:3.1
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm-analysis:7.0
+org.ow2.asm:asm-commons:7.0
+org.ow2.asm:asm-tree:7.0
+org.ow2.asm:asm-util:7.0
+org.ow2.asm:asm:9.0
+org.threeten:threetenbp:1.5.0

buildSrc/src/main/java/google/registry/gradle/plugin/CoverPageGenerator.java

@@ -0,0 +1,211 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import static com.google.common.collect.ImmutableList.toImmutableList;
+import static com.google.common.collect.ImmutableMap.toImmutableMap;
+import static com.google.common.collect.ImmutableSetMultimap.toImmutableSetMultimap;
+import static com.google.common.io.Resources.getResource;
+import static google.registry.gradle.plugin.GcsPluginUtils.toByteArraySupplier;
+
+import com.google.common.collect.ImmutableMap;
+import com.google.common.collect.ImmutableSet;
+import com.google.common.collect.ImmutableSetMultimap;
+import com.google.common.html.types.TrustedResourceUrls;
+import com.google.template.soy.SoyFileSet;
+import com.google.template.soy.tofu.SoyTofu;
+import google.registry.gradle.plugin.ProjectData.TaskData;
+import java.io.File;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.util.Map;
+import java.util.function.Supplier;
+import java.util.stream.Collectors;
+
+/**
+ * Creates the files for a web-page summary of a given {@Link ProjectData}.
+ *
+ * <p>The main job of this class is rendering a tailored cover page that includes information about
+ * the project and any task that ran.
+ *
+ * <p>It returns all the files that need uploading for the cover page to work. This includes any
+ * report and log files linked to in the ProjectData, as well as a cover page (and associated
+ * resources such as CSS files).
+ */
+final class CoverPageGenerator {
+
+  /** List of all resource files that will be uploaded as-is. */
+  private static final ImmutableSet<Path> STATIC_RESOURCE_FILES =
+      ImmutableSet.of(Paths.get("css", "style.css"));
+  /** Name of the entry-point file that will be created. */
+  private static final Path ENTRY_POINT = Paths.get("index.html");
+
+  private final ProjectData projectData;
+  private final ImmutableSetMultimap<TaskData.State, TaskData> tasksByState;
+  /**
+   * The compiled SOY files.
+   *
+   * <p>Will be generated only when actually needed, because it takes a while to compile and we
+   * don't want that to happen unless we actually use it.
+   */
+  private SoyTofu tofu = null;
+
+  CoverPageGenerator(ProjectData projectData) {
+    this.projectData = projectData;
+    this.tasksByState =
+        projectData.tasks().stream().collect(toImmutableSetMultimap(TaskData::state, task -> task));
+  }
+
+  /**
+   * Returns all the files that need uploading for the cover page to work.
+   *
+   * <p>This includes all the report files as well, to make sure that the link works.
+   */
+  FilesWithEntryPoint getFilesToUpload() {
+    ImmutableMap.Builder<Path, Supplier<byte[]>> builder = new ImmutableMap.Builder<>();
+    // Add all the static resource pages
+    STATIC_RESOURCE_FILES.stream().forEach(file -> builder.put(file, resourceLoader(file)));
+    // Create the cover page
+    // Note that the ByteArraySupplier here is lazy - the createCoverPage function is only called
+    // when the resulting Supplier's get function is called.
+    builder.put(ENTRY_POINT, toByteArraySupplier(this::createCoverPage));
+    // Add all the files from the tasks
+    tasksByState.values().stream()
+        .flatMap(task -> task.reports().values().stream())
+        .forEach(reportFiles -> builder.putAll(reportFiles.files()));
+    // Add the logs of every test
+    tasksByState.values().stream()
+        .filter(task -> task.log().isPresent())
+        .forEach(task -> builder.put(getLogPath(task), task.log().get()));
+
+    return FilesWithEntryPoint.create(builder.build(), ENTRY_POINT);
+  }
+
+  /** Renders the cover page. */
+  private String createCoverPage() {
+    return getTofu()
+        .newRenderer("google.registry.gradle.plugin.coverPage")
+        .setData(getSoyData())
+        .render();
+  }
+
+  /** Converts the projectData and all taskData into all the data the soy template needs. */
+  private ImmutableMap<String, Object> getSoyData() {
+    ImmutableMap.Builder<String, Object> builder = new ImmutableMap.Builder<>();
+
+    TaskData.State state =
+        tasksByState.containsKey(TaskData.State.FAILURE)
+            ? TaskData.State.FAILURE
+            : TaskData.State.SUCCESS;
+    String title =
+        state != TaskData.State.FAILURE
+            ? "Success!"
+            : "Failed: "
+                + tasksByState.get(state).stream()
+                    .map(TaskData::uniqueName)
+                    .collect(Collectors.joining(", "));
+
+    builder.put("projectState", state.toString());
+    builder.put("title", title);
+    builder.put("cssFiles", ImmutableSet.of(TrustedResourceUrls.fromConstant("css/style.css")));
+    builder.put("invocation", getInvocation());
+    builder.put("tasksByState", getTasksByStateSoyData());
+    return builder.build();
+  }
+
+  /**
+   * Returns a soy-friendly map from the TaskData.State to the task itslef.
+   *
+   * <p>The key order in the resulting map is always the same (the order from the enum definition)
+   * no matter the key order in the original tasksByState map.
+   */
+  private ImmutableMap<String, Object> getTasksByStateSoyData() {
+    ImmutableMap.Builder<String, Object> builder = new ImmutableMap.Builder<>();
+
+    // We go over the States in the order they are defined rather than the order in which they
+    // happen to be in the tasksByState Map.
+    //
+    // That way we guarantee a consistent order.
+    for (TaskData.State state : TaskData.State.values()) {
+      builder.put(
+          state.toString(),
+          tasksByState.get(state).stream()
+              .map(task -> taskDataToSoy(task))
+              .collect(toImmutableList()));
+    }
+
+    return builder.build();
+  }
+
+  /** returns a soy-friendly version of the given task data. */
+  static ImmutableMap<String, Object> taskDataToSoy(TaskData task) {
+    // Note that all instances of File.separator are replaced with forward slashes so that we can
+    // generate a valid href on Windows.
+    return new ImmutableMap.Builder<String, Object>()
+        .put("uniqueName", task.uniqueName())
+        .put("description", task.description())
+        .put(
+            "log",
+            task.log().isPresent() ? getLogPath(task).toString().replace(File.separator, "/") : "")
+        .put(
+            "reports",
+            task.reports().entrySet().stream()
+                .collect(
+                    toImmutableMap(
+                        Map.Entry::getKey,
+                        entry ->
+                            entry.getValue().files().isEmpty()
+                                ? ""
+                                : entry
+                                    .getValue()
+                                    .entryPoint()
+                                    .toString()
+                                    .replace(File.separator, "/"))))
+        .build();
+  }
+
+  private String getInvocation() {
+    StringBuilder builder = new StringBuilder();
+    builder.append("./gradlew");
+    projectData.tasksRequested().forEach(task -> builder.append(" ").append(task));
+    projectData
+        .projectProperties()
+        .forEach((key, value) -> builder.append(String.format(" -P %s=%s", key, value)));
+    return builder.toString();
+  }
+
+  /** Returns a lazily created soy renderer */
+  private SoyTofu getTofu() {
+    if (tofu == null) {
+      tofu =
+          SoyFileSet.builder()
+              .add(getResource(CoverPageGenerator.class, "soy/coverpage.soy"))
+              .build()
+              .compileToTofu();
+    }
+    return tofu;
+  }
+
+  private static Path getLogPath(TaskData task) {
+    // We replace colons with dashes so that the resulting filename is always valid, even in
+    // Windows. As a dash is not a valid character in Java identifies, a task name cannot include
+    // it, so the uniqueness of the name is perserved.
+    return Paths.get("logs", task.uniqueName().replace(":", "-") + ".log");
+  }
+
+  private static Supplier<byte[]> resourceLoader(Path path) {
+    return toByteArraySupplier(getResource(CoverPageGenerator.class, path.toString()));
+  }
+}

buildSrc/src/main/java/google/registry/gradle/plugin/FilesWithEntryPoint.java

@@ -0,0 +1,59 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import static com.google.common.base.Preconditions.checkArgument;
+
+import com.google.auto.value.AutoValue;
+import com.google.common.collect.ImmutableMap;
+import java.nio.file.Path;
+import java.util.function.Supplier;
+
+/**
+ * Holds a set of files with a browser-friendly entry point to those files.
+ *
+ * <p>The file data is lazily generated.
+ *
+ * <p>If there is at least one file, it's guaranteed that the entry point is one of these files.
+ */
+@AutoValue
+abstract class FilesWithEntryPoint {
+
+  /**
+   * All files that are part of this report, keyed from their path to a supplier of their content.
+   *
+   * <p>The reason we use a supplier instead of loading the content is in case the content is very
+   * large...
+   *
+   * <p>Also, no point in doing IO before we need it!
+   */
+  abstract ImmutableMap<Path, Supplier<byte[]>> files();
+
+  /**
+   * The file that gives access (links...) to all the data in the report.
+   *
+   * <p>Guaranteed to be a key in {@link #files} if and only if files isn't empty.
+   */
+  abstract Path entryPoint();
+
+  static FilesWithEntryPoint create(ImmutableMap<Path, Supplier<byte[]>> files, Path entryPoint) {
+    checkArgument(files.isEmpty() || files.containsKey(entryPoint));
+    return new AutoValue_FilesWithEntryPoint(files, entryPoint);
+  }
+
+  static FilesWithEntryPoint createSingleFile(Path path, Supplier<byte[]> data) {
+    return create(ImmutableMap.of(path, data), path);
+  }
+}

buildSrc/src/main/java/google/registry/gradle/plugin/GcsPluginUtils.java

@@ -0,0 +1,221 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import static com.google.common.collect.ImmutableMap.toImmutableMap;
+import static com.google.common.collect.Iterables.getOnlyElement;
+import static java.nio.charset.StandardCharsets.UTF_8;
+
+import com.google.cloud.storage.BlobInfo;
+import com.google.cloud.storage.Storage;
+import com.google.common.collect.ImmutableMap;
+import com.google.common.collect.Streams;
+import com.google.common.io.Files;
+import com.google.common.io.Resources;
+import java.io.ByteArrayOutputStream;
+import java.io.File;
+import java.io.IOException;
+import java.io.UncheckedIOException;
+import java.net.URL;
+import java.nio.file.Path;
+import java.util.Map;
+import java.util.Optional;
+import java.util.function.Supplier;
+import java.util.zip.ZipEntry;
+import java.util.zip.ZipOutputStream;
+
+/** Utility functions used in the GCS plugin. */
+final class GcsPluginUtils {
+
+  private static final ImmutableMap<String, String> EXTENSION_TO_CONTENT_TYPE =
+      new ImmutableMap.Builder<String, String>()
+          .put("html", "text/html")
+          .put("htm", "text/html")
+          .put("log", "text/plain")
+          .put("txt", "text/plain")
+          .put("css", "text/css")
+          .put("xml", "text/xml")
+          .put("zip", "application/zip")
+          .put("js", "text/javascript")
+          .build();
+
+  private static final String DEFAULT_CONTENT_TYPE = "application/octet-stream";
+
+  static Path toNormalizedPath(File file) {
+    return file.toPath().toAbsolutePath().normalize();
+  }
+
+  static Path toNormalizedPath(Path file) {
+    return file.toAbsolutePath().normalize();
+  }
+
+  static String getContentType(String fileName) {
+    return EXTENSION_TO_CONTENT_TYPE.getOrDefault(
+        Files.getFileExtension(fileName), DEFAULT_CONTENT_TYPE);
+  }
+
+  static void uploadFileToGcs(
+      Storage storage, String bucket, Path path, Supplier<byte[]> dataSupplier) {
+    // Replace Windows file separators with forward slashes.
+    String filename = path.toString().replace(File.separator, "/");
+    storage.create(
+        BlobInfo.newBuilder(bucket, filename).setContentType(getContentType(filename)).build(),
+        dataSupplier.get());
+  }
+
+  static void uploadFilesToGcsMultithread(
+      Storage storage, String bucket, Path folder, Map<Path, Supplier<byte[]>> files) {
+    ImmutableMap.Builder<Path, Thread> threads = new ImmutableMap.Builder<>();
+    files.forEach(
+        (path, dataSupplier) -> {
+          Thread thread =
+              new Thread(
+                  () -> uploadFileToGcs(storage, bucket, folder.resolve(path), dataSupplier));
+          thread.start();
+          threads.put(path, thread);
+        });
+    threads
+        .build()
+        .forEach(
+            (path, thread) -> {
+              try {
+                thread.join();
+              } catch (InterruptedException e) {
+                System.out.format("Upload of %s interrupted", path);
+              }
+            });
+  }
+
+  static Supplier<byte[]> toByteArraySupplier(String data) {
+    return () -> data.getBytes(UTF_8);
+  }
+
+  static Supplier<byte[]> toByteArraySupplier(Supplier<String> dataSupplier) {
+    return () -> dataSupplier.get().getBytes(UTF_8);
+  }
+
+  static Supplier<byte[]> toByteArraySupplier(File file) {
+    return () -> {
+      try {
+        return Files.toByteArray(file);
+      } catch (IOException e) {
+        throw new UncheckedIOException(e);
+      }
+    };
+  }
+
+  static Supplier<byte[]> toByteArraySupplier(URL url) {
+    return () -> {
+      try {
+        return Resources.toByteArray(url);
+      } catch (IOException e) {
+        throw new UncheckedIOException(e);
+      }
+    };
+  }
+
+  /**
+   * Reads all the files generated by a Report into a FilesWithEntryPoint object.
+   *
+   * <p>Every FilesWithEntryPoint must have a single link "entry point" that gives users access to
+   * all the files. If the report generated just one file - we will just link to that file.
+   *
+   * <p>However, if the report generated more than one file - the only thing we can safely do is to
+   * zip all the files and link to the zip file.
+   *
+   * <p>As an alternative to using a zip file, we allow the caller to supply an optional "entry
+   * point" file that will link to all the other files. If that file is given and is "appropriate"
+   * (exists and is in the correct location) - we will upload all the report files "as is" and link
+   * to the entry file.
+   *
+   * @param destination the location of the output. Either a file or a directory. If a directory -
+   *     then all the files inside that directory are the outputs we're looking for.
+   * @param entryPointHint If present - a hint to what the entry point to this directory tree is.
+   *     Will only be used if all of the following apply: (a) {@code
+   *     destination.isDirectory()==true}, (b) there are 2 or more files in the {@code destination}
+   *     directory, and (c) {@code entryPointHint.get()} is one of the files nested inside of the
+   *     {@code destination} directory.
+   */
+  static FilesWithEntryPoint readFilesWithEntryPoint(
+      File destination, Optional<File> entryPointHint, Path rootDir) {
+
+    Path destinationPath = rootDir.relativize(toNormalizedPath(destination));
+
+    if (destination.isFile()) {
+      // The destination is a single file - find its root, and add this single file to the
+      // FilesWithEntryPoint.
+      return FilesWithEntryPoint.createSingleFile(
+          destinationPath, toByteArraySupplier(destination));
+    }
+
+    if (!destination.isDirectory()) {
+      // This isn't a file nor a directory - so it doesn't exist! Return empty FilesWithEntryPoint
+      return FilesWithEntryPoint.create(ImmutableMap.of(), destinationPath);
+    }
+
+    // The destination is a directory - find all the actual files first
+    ImmutableMap<Path, Supplier<byte[]>> files =
+        Streams.stream(Files.fileTraverser().depthFirstPreOrder(destination))
+            .filter(File::isFile)
+            .collect(
+                toImmutableMap(
+                    file -> rootDir.relativize(toNormalizedPath(file)),
+                    GcsPluginUtils::toByteArraySupplier));
+
+    if (files.isEmpty()) {
+      // The directory exists, but is empty. Return empty FilesWithEntryPoint
+      return FilesWithEntryPoint.create(ImmutableMap.of(), destinationPath);
+    }
+
+    if (files.size() == 1) {
+      // We got a directory, but it only has a single file. We can link to that.
+      return FilesWithEntryPoint.create(files, getOnlyElement(files.keySet()));
+    }
+
+    // There are multiple files in the report! We need to check the entryPointHint
+    Optional<Path> entryPointPath =
+        entryPointHint.map(file -> rootDir.relativize(toNormalizedPath(file)));
+
+    if (entryPointPath.isPresent() && files.containsKey(entryPointPath.get())) {
+      // We were given the entry point! Use it!
+      return FilesWithEntryPoint.create(files, entryPointPath.get());
+    }
+
+    // We weren't given an appropriate entry point. But we still need a single link to all this data
+    // - so we'll zip it and just host a single file.
+    Path zipFilePath = destinationPath.resolve(destinationPath.getFileName().toString() + ".zip");
+    return FilesWithEntryPoint.createSingleFile(zipFilePath, createZippedByteArraySupplier(files));
+  }
+
+  static Supplier<byte[]> createZippedByteArraySupplier(Map<Path, Supplier<byte[]>> files) {
+    return () -> zipFiles(files);
+  }
+
+  private static byte[] zipFiles(Map<Path, Supplier<byte[]>> files) {
+    ByteArrayOutputStream output = new ByteArrayOutputStream();
+    try (ZipOutputStream zip = new ZipOutputStream(output)) {
+      for (Path path : files.keySet()) {
+        zip.putNextEntry(new ZipEntry(path.toString()));
+        zip.write(files.get(path).get());
+        zip.closeEntry();
+      }
+    } catch (IOException e) {
+      throw new UncheckedIOException(e);
+    }
+    return output.toByteArray();
+  }
+
+  private GcsPluginUtils() {}
+}

buildSrc/src/main/java/google/registry/gradle/plugin/ProjectData.java

@@ -0,0 +1,138 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import com.google.auto.value.AutoValue;
+import com.google.common.collect.ImmutableMap;
+import com.google.common.collect.ImmutableSet;
+import google.registry.gradle.plugin.ProjectData.TaskData;
+import java.util.Map;
+import java.util.Optional;
+import java.util.function.Supplier;
+
+/**
+ * All the data of a root Gradle project.
+ *
+ * <p>This is basically all the "relevant" data from a Gradle Project, arranged in an immutable and
+ * more convenient way.
+ */
+@AutoValue
+abstract class ProjectData {
+
+  abstract String name();
+
+  abstract String description();
+
+  abstract String gradleVersion();
+
+  abstract ImmutableMap<String, String> projectProperties();
+
+  abstract ImmutableMap<String, String> systemProperties();
+
+  abstract ImmutableSet<String> tasksRequested();
+
+  abstract ImmutableSet<TaskData> tasks();
+
+  abstract Builder toBuilder();
+
+  static Builder builder() {
+    return new AutoValue_ProjectData.Builder();
+  }
+
+  @AutoValue.Builder
+  abstract static class Builder {
+    abstract Builder setName(String name);
+
+    abstract Builder setDescription(String description);
+
+    abstract Builder setGradleVersion(String gradleVersion);
+
+    abstract Builder setProjectProperties(Map<String, String> projectProperties);
+
+    abstract Builder setSystemProperties(Map<String, String> systemProperties);
+
+    abstract Builder setTasksRequested(Iterable<String> tasksRequested);
+
+    abstract ImmutableSet.Builder<TaskData> tasksBuilder();
+
+    Builder addTask(TaskData task) {
+      tasksBuilder().add(task);
+      return this;
+    }
+
+    abstract ProjectData build();
+  }
+
+  /**
+   * Relevant data to a single Task's.
+   *
+   * <p>Some Tasks are also "Reporting", meaning they create file outputs we want to upload in
+   * various formats. The format that interests us the most is "html", as that's nicely browsable,
+   * but they might also have other formats.
+   */
+  @AutoValue
+  abstract static class TaskData {
+
+    enum State {
+      /** The task has failed for some reason. */
+      FAILURE,
+      /** The task was actually run and has finished successfully. */
+      SUCCESS,
+      /** The task was up-to-date and successful, and hence didn't need to run again. */
+      UP_TO_DATE
+    }
+
+    abstract String uniqueName();
+
+    abstract String description();
+
+    abstract State state();
+
+    abstract Optional<Supplier<byte[]>> log();
+
+    /**
+     * Returns the FilesWithEntryPoint for every report, keyed on the report type.
+     *
+     * <p>The "html" report type is the most interesting, but there are other report formats.
+     */
+    abstract ImmutableMap<String, FilesWithEntryPoint> reports();
+
+    abstract Builder toBuilder();
+
+    static Builder builder() {
+      return new AutoValue_ProjectData_TaskData.Builder();
+    }
+
+    @AutoValue.Builder
+    abstract static class Builder {
+      abstract Builder setUniqueName(String name);
+
+      abstract Builder setDescription(String description);
+
+      abstract Builder setState(State state);
+
+      abstract Builder setLog(Supplier<byte[]> log);
+
+      abstract ImmutableMap.Builder<String, FilesWithEntryPoint> reportsBuilder();
+
+      Builder putReport(String type, FilesWithEntryPoint reportFiles) {
+        reportsBuilder().put(type, reportFiles);
+        return this;
+      }
+
+      abstract TaskData build();
+    }
+  }
+}

buildSrc/src/main/java/google/registry/gradle/plugin/ReportUploader.java

@@ -0,0 +1,311 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import static com.google.common.base.Preconditions.checkArgument;
+import static com.google.common.base.Preconditions.checkState;
+import static com.google.common.base.Strings.isNullOrEmpty;
+import static google.registry.gradle.plugin.GcsPluginUtils.readFilesWithEntryPoint;
+import static google.registry.gradle.plugin.GcsPluginUtils.toByteArraySupplier;
+import static google.registry.gradle.plugin.GcsPluginUtils.toNormalizedPath;
+import static google.registry.gradle.plugin.GcsPluginUtils.uploadFileToGcs;
+import static google.registry.gradle.plugin.GcsPluginUtils.uploadFilesToGcsMultithread;
+
+import com.google.auth.oauth2.GoogleCredentials;
+import com.google.cloud.storage.Storage;
+import com.google.cloud.storage.StorageOptions;
+import com.google.common.collect.ImmutableMap;
+import com.google.common.io.Files;
+import google.registry.gradle.plugin.ProjectData.TaskData;
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.IOException;
+import java.io.UncheckedIOException;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.security.SecureRandom;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.Optional;
+import java.util.function.BiConsumer;
+import java.util.function.Supplier;
+import org.gradle.api.DefaultTask;
+import org.gradle.api.Project;
+import org.gradle.api.Task;
+import org.gradle.api.reporting.DirectoryReport;
+import org.gradle.api.reporting.Report;
+import org.gradle.api.reporting.ReportContainer;
+import org.gradle.api.reporting.Reporting;
+import org.gradle.api.tasks.TaskAction;
+
+/** A task that uploads the Reports generated by other tasks to GCS. */
+public class ReportUploader extends DefaultTask {
+
+  private static final SecureRandom SECURE_RANDOM = new SecureRandom();
+  private static final ImmutableMap<String, BiConsumer<ReportUploader, String>> UPLOAD_FUNCTIONS =
+      ImmutableMap.of(
+          "file://", ReportUploader::saveResultsToLocalFolder,
+          "gcs://", ReportUploader::uploadResultsToGcs);
+
+  private final ArrayList<Task> tasks = new ArrayList<>();
+  private final HashMap<String, StringBuilder> logs = new HashMap<>();
+  private Project project;
+
+  private String destination = null;
+  private String credentialsFile = null;
+  private String multithreadedUpload = null;
+
+  /**
+   * Sets the destination of the reports.
+   *
+   * <p>Currently supports two types of destinations:
+   *
+   * <ul>
+   *   <li>file://[absulute local path], e.g. file:///tmp/buildOutputs/
+   *   <li>gcs://[bucket name]/[optional path], e.g. gcs://my-bucket/buildOutputs/
+   * </ul>
+   */
+  public void setDestination(String destination) {
+    this.destination = destination;
+  }
+
+  public void setCredentialsFile(String credentialsFile) {
+    this.credentialsFile = credentialsFile;
+  }
+
+  public void setMultithreadedUpload(String multithreadedUpload) {
+    this.multithreadedUpload = multithreadedUpload;
+  }
+
+  /** Converts the given Gradle Project into a ProjectData. */
+  private ProjectData createProjectData() {
+    ProjectData.Builder builder =
+        ProjectData.builder()
+            .setName(project.getPath() + project.getName())
+            .setDescription(
+                Optional.ofNullable(project.getDescription()).orElse("[No description available]"))
+            .setGradleVersion(project.getGradle().getGradleVersion())
+            .setProjectProperties(project.getGradle().getStartParameter().getProjectProperties())
+            .setSystemProperties(project.getGradle().getStartParameter().getSystemPropertiesArgs())
+            .setTasksRequested(project.getGradle().getStartParameter().getTaskNames());
+
+    Path rootDir = toNormalizedPath(project.getRootDir());
+    tasks.stream()
+        .filter(task -> task.getState().getExecuted() || task.getState().getUpToDate())
+        .map(task -> createTaskData(task, rootDir))
+        .forEach(builder.tasksBuilder()::add);
+    return builder.build();
+  }
+
+  /**
+   * Converts a Gradle Task into a TaskData.
+   *
+   * @param rootDir the root directory of the main Project - used to get the relative path of any
+   *     Task files.
+   */
+  private TaskData createTaskData(Task task, Path rootDir) {
+    TaskData.State state =
+        task.getState().getFailure() != null
+            ? TaskData.State.FAILURE
+            : task.getState().getUpToDate() ? TaskData.State.UP_TO_DATE : TaskData.State.SUCCESS;
+    String log = logs.get(task.getPath()).toString();
+
+    TaskData.Builder builder =
+        TaskData.builder()
+            .setState(state)
+            .setUniqueName(task.getPath())
+            .setDescription(
+                Optional.ofNullable(task.getDescription()).orElse("[No description available]"));
+    if (!log.isEmpty()) {
+      builder.setLog(toByteArraySupplier(log));
+    }
+
+    Reporting<? extends ReportContainer<? extends Report>> reporting = asReporting(task);
+
+    if (reporting != null) {
+      // This Task is also a Reporting task! It has a destination file/directory for every supported
+      // format.
+      // Add the files for each of the formats into the ReportData.
+      reporting
+          .getReports()
+          .getAsMap()
+          .forEach(
+              (type, report) -> {
+                File destination = report.getDestination();
+                // The destination could be a file, or a directory. If it's a directory - the Report
+                // could have created multiple files - and we need to know to which one of those to
+                // link.
+                //
+                // If we're lucky, whoever implemented the Report made sure to extend
+                // DirectoryReport, which gives us the entry point to all the files.
+                //
+                // This isn't guaranteed though, as it depends on the implementer.
+                Optional<File> entryPointHint =
+                    destination.isDirectory() && (report instanceof DirectoryReport)
+                        ? Optional.ofNullable(((DirectoryReport) report).getEntryPoint())
+                        : Optional.empty();
+                builder
+                    .reportsBuilder()
+                    .put(type, readFilesWithEntryPoint(destination, entryPointHint, rootDir));
+              });
+    }
+    return builder.build();
+  }
+
+  private FilesWithEntryPoint generateFilesToUpload() {
+    ProjectData projectData = createProjectData();
+    CoverPageGenerator coverPageGenerator = new CoverPageGenerator(projectData);
+    return coverPageGenerator.getFilesToUpload();
+  }
+
+  @TaskAction
+  void uploadResults() {
+    System.out.format("ReportUploader: destination= '%s'\n", destination);
+
+    try {
+
+      if (isNullOrEmpty(destination)) {
+        System.out.format("ReportUploader: no destination given, skipping...\n");
+        return;
+      }
+
+      for (String key : UPLOAD_FUNCTIONS.keySet()) {
+        if (destination.startsWith(key)) {
+          UPLOAD_FUNCTIONS.get(key).accept(this, destination.substring(key.length()));
+          return;
+        }
+      }
+      System.out.format(
+          "ReportUploader: given destination '%s' doesn't start with one of %s."
+              + " Defaulting to saving in /tmp\n",
+          destination, UPLOAD_FUNCTIONS.keySet());
+      saveResultsToLocalFolder("/tmp/");
+    } catch (Throwable e) {
+      System.out.format("ReportUploader: Encountered error %s\n", e);
+      e.printStackTrace(System.out);
+      System.out.format("ReportUploader: skipping upload\n");
+    }
+  }
+
+  private void saveResultsToLocalFolder(String absoluteFolderName) {
+    Path folder = Paths.get(absoluteFolderName, createUniqueFolderName());
+    checkArgument(
+        folder.isAbsolute(),
+        "Local files destination must be an absolute path, but is %s",
+        absoluteFolderName);
+    FilesWithEntryPoint filesToUpload = generateFilesToUpload();
+    System.out.format(
+        "ReportUploader: going to save %s files to %s\n", filesToUpload.files().size(), folder);
+    filesToUpload
+        .files()
+        .forEach((path, dataSupplier) -> saveFile(folder.resolve(path), dataSupplier));
+    System.out.format(
+        "ReportUploader: report saved to file://%s\n", folder.resolve(filesToUpload.entryPoint()));
+  }
+
+  private void saveFile(Path path, Supplier<byte[]> dataSupplier) {
+    File dir = path.getParent().toFile();
+    if (!dir.isDirectory()) {
+      checkState(dir.mkdirs(), "Couldn't create directory %s", dir);
+    }
+    try {
+      Files.write(dataSupplier.get(), path.toFile());
+    } catch (IOException e) {
+      throw new UncheckedIOException(e);
+    }
+  }
+
+  private void uploadResultsToGcs(String destination) {
+    checkArgument(
+        !destination.isEmpty(), "destination must include at least the bucket name, but is empty");
+    Path bucketWithFolder = Paths.get(destination, createUniqueFolderName());
+    String bucket = bucketWithFolder.getName(0).toString();
+    Path folder = bucketWithFolder.subpath(1, bucketWithFolder.getNameCount());
+
+    StorageOptions.Builder storageOptions = StorageOptions.newBuilder();
+    if (!isNullOrEmpty(credentialsFile)) {
+      try {
+        storageOptions.setCredentials(
+            GoogleCredentials.fromStream(new FileInputStream(credentialsFile)));
+      } catch (IOException e) {
+        throw new UncheckedIOException(e);
+      }
+    }
+    Storage storage = storageOptions.build().getService();
+
+    FilesWithEntryPoint filesToUpload = generateFilesToUpload();
+
+    System.out.format(
+        "ReportUploader: going to upload %s files to %s/%s\n",
+        filesToUpload.files().size(), bucket, folder);
+    if ("yes".equals(multithreadedUpload)) {
+      System.out.format("ReportUploader: multi-threaded upload\n");
+      uploadFilesToGcsMultithread(storage, bucket, folder, filesToUpload.files());
+    } else {
+      System.out.format("ReportUploader: single threaded upload\n");
+      filesToUpload
+          .files()
+          .forEach(
+              (path, dataSupplier) -> {
+                System.out.format("ReportUploader: Uploading %s\n", path);
+                uploadFileToGcs(storage, bucket, folder.resolve(path), dataSupplier);
+              });
+    }
+    System.out.format(
+        "ReportUploader: report uploaded to https://storage.googleapis.com/%s/%s\n",
+        bucket, folder.resolve(filesToUpload.entryPoint()));
+  }
+
+  void setProject(Project project) {
+    this.project = project;
+
+    for (Project subProject : project.getAllprojects()) {
+      subProject.getTasks().all(this::addTask);
+    }
+  }
+
+  private void addTask(Task task) {
+    if (task instanceof ReportUploader) {
+      return;
+    }
+    tasks.add(task);
+    StringBuilder log = new StringBuilder();
+    checkArgument(
+        !logs.containsKey(task.getPath()),
+        "Multiple tasks with the same .getPath()=%s",
+        task.getPath());
+    logs.put(task.getPath(), log);
+    task.getLogging().addStandardOutputListener(output -> log.append(output));
+    task.getLogging().addStandardErrorListener(output -> log.append(output));
+    task.finalizedBy(this);
+  }
+
+  @SuppressWarnings("unchecked")
+  private static Reporting<? extends ReportContainer<? extends Report>> asReporting(Task task) {
+    if (task instanceof Reporting) {
+      return (Reporting<? extends ReportContainer<? extends Report>>) task;
+    }
+    return null;
+  }
+
+  private String createUniqueFolderName() {
+    return String.format(
+        "%h-%h-%h-%h",
+        SECURE_RANDOM.nextInt(),
+        SECURE_RANDOM.nextInt(),
+        SECURE_RANDOM.nextInt(),
+        SECURE_RANDOM.nextInt());
+  }
+}

buildSrc/src/main/java/google/registry/gradle/plugin/ReportUploaderPlugin.java

@@ -0,0 +1,47 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import org.gradle.api.Plugin;
+import org.gradle.api.Project;
+
+/**
+ * Plugin setting up the ReportUploader task.
+ *
+ * <p>It goes over all the tasks in a project and pass them on to the ReportUploader task for set
+ * up.
+ *
+ * <p>Note that since we're passing in all the projects' tasks - this includes the ReportUploader
+ * itself! It's up to the ReportUploader to take care of not having "infinite loops" caused by
+ * waiting for itself to end before finishing.
+ */
+public class ReportUploaderPlugin implements Plugin<Project> {
+
+  @Override
+  public void apply(Project project) {
+    ReportUploader reportUploader =
+        project
+            .getTasks()
+            .create(
+                "reportUploader",
+                ReportUploader.class,
+                task -> {
+                  task.setDescription("Uploads the reports to GCS bucket");
+                  task.setGroup("uploads");
+                });
+
+    reportUploader.setProject(project);
+  }
+}

buildSrc/src/main/resources/google/registry/gradle/plugin/css/style.css

@@ -0,0 +1,27 @@
+body {
+    font-family: sans-serif;
+}
+.task_state_SUCCESS {
+    color: green;
+}
+.task_state_FAILURE {
+    color: red;
+}
+.task_name {
+    display: block;
+    font-size: larger;
+    font-weight: bold;
+}
+.task_description {
+    display: block;
+    margin-left: 1em;
+    color: gray;
+}
+.report_links {
+    margin-left: 1em;
+}
+.report_link_broken {
+    text-decoration: line-through;
+    color: gray;
+}
+

buildSrc/src/main/resources/google/registry/gradle/plugin/soy/coverpage.soy

@@ -0,0 +1,107 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+{namespace google.registry.gradle.plugin}
+
+{template .coverPage}
+  {@param title: string}
+  {@param cssFiles: list<trusted_resource_uri>}
+  {@param projectState: string}
+  {@param invocation: string}
+  {@param tasksByState: map<string, list<[uniqueName: string, description: string, log: string, reports: map<string, string>]>>}
+
+  <title>{$title}</title>
+  {for $cssFile in $cssFiles}
+    <link rel="stylesheet" type="text/css" href="{$cssFile}">
+  {/for}
+  <body>
+    <div class="project">
+      <h1 class="project_title {'task_state_' + $projectState}">{$title}</h1>
+      <span class="project_subtitle">
+        Build results for <span class="project_invocation">{$invocation}</span>
+      </span>
+
+      {for $taskState in mapKeys($tasksByState)}
+        {if length($tasksByState[$taskState]) > 0}
+          {call .tasksOfState}
+            {param state: $taskState /}
+            {param tasks: $tasksByState[$taskState] /}
+          {/call}
+        {/if}
+      {/for}
+
+    </div>
+  </body>
+{/template}
+
+{template .tasksOfState}
+  {@param state: string}
+  {@param tasks: list<[uniqueName: string, description: string, log: string, reports: map<string, string>]>}
+
+  <div class="{'task_state_' + $state}">
+    <p>{$state}</p>
+    // Place the tasks with actual reports first, since those are more likely to be useful
+    {for $task in $tasks}
+      {if length(mapKeys($task.reports)) > 0}
+        {call .task}
+          {param task: $task /}
+        {/call}
+      {/if}
+    {/for}
+    // Followup with reports without links
+    {for $task in $tasks}
+      {if length(mapKeys($task.reports)) == 0}
+        {call .task}
+          {param task: $task /}
+        {/call}
+      {/if}
+    {/for}
+  </div>
+{/template}
+
+{template .task}
+  {@param task: [uniqueName: string, description: string, log: string, reports: map<string, string>]}
+  {call .taskInternal}
+    {param uniqueName: $task.uniqueName /}
+    {param description: $task.description /}
+    {param log: $task.log /}
+    {param reports: $task.reports /}
+  {/call}
+{/template}
+
+{template .taskInternal}
+  {@param uniqueName: string}
+  {@param description: string}
+  {@param log: string}
+  {@param reports: map<string, string>}
+
+  <div class="task">
+    <span class="task_name">{$uniqueName}</span>
+    <span class="task_description">{$description}</span>
+    <span class="report_links">
+      {if $log}
+        <a href="{$log}">[log]</a>
+      {else}
+        <span class="report_link_broken">[log]</span>
+      {/if}
+      {for $type in mapKeys($reports)}
+        {if $reports[$type]}
+          <a href="{$reports[$type]}">[{$type}]</a>
+        {else}
+          <span class="report_link_broken">[{$type}]</span>
+        {/if}
+      {/for}
+    </span>
+  </div>
+{/template}

buildSrc/src/test/java/google/registry/gradle/plugin/CoverPageGeneratorTest.java

@@ -0,0 +1,279 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import static com.google.common.collect.ImmutableMap.toImmutableMap;
+import static com.google.common.truth.Truth.assertThat;
+import static com.google.common.truth.Truth8.assertThat;
+import static google.registry.gradle.plugin.GcsPluginUtils.toByteArraySupplier;
+import static java.nio.charset.StandardCharsets.UTF_8;
+
+import com.google.common.base.Joiner;
+import com.google.common.collect.ImmutableMap;
+import com.google.common.collect.ImmutableSet;
+import google.registry.gradle.plugin.ProjectData.TaskData;
+import java.io.File;
+import java.nio.file.Paths;
+import org.junit.jupiter.api.Test;
+
+/** Tests for {@link CoverPageGenerator} */
+final class CoverPageGeneratorTest {
+
+  private static final ProjectData EMPTY_PROJECT =
+      ProjectData.builder()
+          .setName("project-name")
+          .setDescription("project-description")
+          .setGradleVersion("gradle-version")
+          .setProjectProperties(ImmutableMap.of("key", "value"))
+          .setSystemProperties(ImmutableMap.of())
+          .setTasksRequested(ImmutableSet.of(":a:task1", ":a:task2"))
+          .build();
+
+  private static final TaskData EMPTY_TASK_SUCCESS =
+      TaskData.builder()
+          .setUniqueName("task-success")
+          .setDescription("a successful task")
+          .setState(TaskData.State.SUCCESS)
+          .build();
+
+  private static final TaskData EMPTY_TASK_FAILURE =
+      TaskData.builder()
+          .setUniqueName("task-failure")
+          .setDescription("a failed task")
+          .setState(TaskData.State.FAILURE)
+          .build();
+
+  private static final TaskData EMPTY_TASK_UP_TO_DATE =
+      TaskData.builder()
+          .setUniqueName("task-up-to-date")
+          .setDescription("an up-to-date task")
+          .setState(TaskData.State.UP_TO_DATE)
+          .build();
+
+  private static final Joiner filenameJoiner = Joiner.on(File.separator);
+
+  private ImmutableMap<String, String> getGeneratedFiles(ProjectData project) {
+    CoverPageGenerator coverPageGenerator = new CoverPageGenerator(project);
+    FilesWithEntryPoint files = coverPageGenerator.getFilesToUpload();
+    return files.files().entrySet().stream()
+        .collect(
+            toImmutableMap(
+                entry -> entry.getKey().toString(),
+                entry -> new String(entry.getValue().get(), UTF_8)));
+  }
+
+  private String getContentOfGeneratedFile(ProjectData project, String expectedPath) {
+    ImmutableMap<String, String> files = getGeneratedFiles(project);
+    assertThat(files).containsKey(expectedPath);
+    return files.get(expectedPath);
+  }
+
+  private String getCoverPage(ProjectData project) {
+    return getContentOfGeneratedFile(project, "index.html");
+  }
+
+  @Test
+  void testGetFilesToUpload_entryPoint_isIndexHtml() {
+    CoverPageGenerator coverPageGenerator = new CoverPageGenerator(EMPTY_PROJECT);
+    assertThat(coverPageGenerator.getFilesToUpload().entryPoint())
+        .isEqualTo(Paths.get("index.html"));
+  }
+
+  @Test
+  void testGetFilesToUpload_containsEntryFile() {
+    String content = getContentOfGeneratedFile(EMPTY_PROJECT, "index.html");
+    assertThat(content)
+        .contains(
+            "<span class=\"project_invocation\">./gradlew :a:task1 :a:task2 -P key=value</span>");
+  }
+
+  @Test
+  void testCoverPage_showsFailedTask() {
+    String content = getCoverPage(EMPTY_PROJECT.toBuilder().addTask(EMPTY_TASK_FAILURE).build());
+    assertThat(content).contains("task-failure");
+    assertThat(content).contains("<p>FAILURE</p>");
+    assertThat(content).doesNotContain("<p>SUCCESS</p>");
+    assertThat(content).doesNotContain("<p>UP_TO_DATE</p>");
+  }
+
+  @Test
+  void testCoverPage_showsSuccessfulTask() {
+    String content = getCoverPage(EMPTY_PROJECT.toBuilder().addTask(EMPTY_TASK_SUCCESS).build());
+    assertThat(content).contains("task-success");
+    assertThat(content).doesNotContain("<p>FAILURE</p>");
+    assertThat(content).contains("<p>SUCCESS</p>");
+    assertThat(content).doesNotContain("<p>UP_TO_DATE</p>");
+  }
+
+  @Test
+  void testCoverPage_showsUpToDateTask() {
+    String content = getCoverPage(EMPTY_PROJECT.toBuilder().addTask(EMPTY_TASK_UP_TO_DATE).build());
+    assertThat(content).contains("task-up-to-date");
+    assertThat(content).doesNotContain("<p>FAILURE</p>");
+    assertThat(content).doesNotContain("<p>SUCCESS</p>");
+    assertThat(content).contains("<p>UP_TO_DATE</p>");
+  }
+
+  @Test
+  void testCoverPage_failedAreFirst() {
+    String content =
+        getCoverPage(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(EMPTY_TASK_UP_TO_DATE)
+                .addTask(EMPTY_TASK_FAILURE)
+                .addTask(EMPTY_TASK_SUCCESS)
+                .build());
+    assertThat(content).contains("<p>FAILURE</p>");
+    assertThat(content).contains("<p>SUCCESS</p>");
+    assertThat(content).contains("<p>UP_TO_DATE</p>");
+    assertThat(content).containsMatch("(?s)<p>FAILURE</p>.*<p>SUCCESS</p>");
+    assertThat(content).containsMatch("(?s)<p>FAILURE</p>.*<p>UP_TO_DATE</p>");
+    assertThat(content).doesNotContainMatch("(?s)<p>SUCCESS</p>.*<p>FAILURE</p>");
+    assertThat(content).doesNotContainMatch("(?s)<p>UP_TO_DATE</p>.*<p>FAILURE</p>");
+  }
+
+  @Test
+  void testCoverPage_failingTask_statusIsFailure() {
+    String content =
+        getCoverPage(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(EMPTY_TASK_UP_TO_DATE)
+                .addTask(EMPTY_TASK_FAILURE)
+                .addTask(EMPTY_TASK_SUCCESS)
+                .build());
+    assertThat(content).contains("<title>Failed: task-failure</title>");
+  }
+
+  @Test
+  void testCoverPage_noFailingTask_statusIsSuccess() {
+    String content =
+        getCoverPage(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(EMPTY_TASK_UP_TO_DATE)
+                .addTask(EMPTY_TASK_SUCCESS)
+                .build());
+    assertThat(content).contains("<title>Success!</title>");
+  }
+
+  @Test
+  void testGetFilesToUpload_containsCssFile() {
+    ImmutableMap<String, String> files = getGeneratedFiles(EMPTY_PROJECT);
+    assertThat(files).containsKey(filenameJoiner.join("css", "style.css"));
+    assertThat(files.get(filenameJoiner.join("css", "style.css"))).contains("body {");
+    assertThat(files.get("index.html"))
+        .contains("<link rel=\"stylesheet\" type=\"text/css\" href=\"css/style.css\">");
+  }
+
+  @Test
+  void testCreateReportFiles_taskWithLog() {
+    ImmutableMap<String, String> files =
+        getGeneratedFiles(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(
+                    EMPTY_TASK_SUCCESS.toBuilder()
+                        .setUniqueName("my:name")
+                        .setLog(toByteArraySupplier("my log data"))
+                        .build())
+                .build());
+    assertThat(files).containsEntry(filenameJoiner.join("logs", "my-name.log"), "my log data");
+    assertThat(files.get("index.html")).contains("<a href=\"logs/my-name.log\">[log]</a>");
+  }
+
+  @Test
+  void testCreateReportFiles_taskWithoutLog() {
+    ImmutableMap<String, String> files =
+        getGeneratedFiles(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(EMPTY_TASK_SUCCESS.toBuilder().setUniqueName("my:name").build())
+                .build());
+    assertThat(files).doesNotContainKey("logs/my-name.log");
+    assertThat(files.get("index.html")).contains("<span class=\"report_link_broken\">[log]</span>");
+  }
+
+  @Test
+  void testCreateReportFiles_taskWithFilledReport() {
+    ImmutableMap<String, String> files =
+        getGeneratedFiles(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(
+                    EMPTY_TASK_SUCCESS.toBuilder()
+                        .putReport(
+                            "someReport",
+                            FilesWithEntryPoint.create(
+                                ImmutableMap.of(
+                                    Paths.get("path", "report.txt"),
+                                    toByteArraySupplier("report content")),
+                                Paths.get("path", "report.txt")))
+                        .build())
+                .build());
+    assertThat(files).containsEntry(filenameJoiner.join("path", "report.txt"), "report content");
+    assertThat(files.get("index.html")).contains("<a href=\"path/report.txt\">[someReport]</a>");
+  }
+
+  @Test
+  void testCreateReportFiles_taskWithEmptyReport() {
+    ImmutableMap<String, String> files =
+        getGeneratedFiles(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(
+                    EMPTY_TASK_SUCCESS.toBuilder()
+                        .putReport(
+                            "someReport",
+                            FilesWithEntryPoint.create(
+                                ImmutableMap.of(), Paths.get("path", "report.txt")))
+                        .build())
+                .build());
+    assertThat(files).doesNotContainKey(filenameJoiner.join("path", "report.txt"));
+    assertThat(files.get("index.html"))
+        .contains("<span class=\"report_link_broken\">[someReport]</span>");
+  }
+
+  @Test
+  void testCreateReportFiles_taskWithLogAndMultipleReports() {
+    ImmutableMap<String, String> files =
+        getGeneratedFiles(
+            EMPTY_PROJECT.toBuilder()
+                .addTask(
+                    EMPTY_TASK_SUCCESS.toBuilder()
+                        .setUniqueName("my:name")
+                        .setLog(toByteArraySupplier("log data"))
+                        .putReport(
+                            "filledReport",
+                            FilesWithEntryPoint.create(
+                                ImmutableMap.of(
+                                    Paths.get("path-filled", "report.txt"),
+                                    toByteArraySupplier("report content"),
+                                    Paths.get("path-filled", "other", "file.txt"),
+                                    toByteArraySupplier("some other content")),
+                                Paths.get("path-filled", "report.txt")))
+                        .putReport(
+                            "emptyReport",
+                            FilesWithEntryPoint.create(
+                                ImmutableMap.of(), Paths.get("path-empty", "report.txt")))
+                        .build())
+                .build());
+    assertThat(files)
+        .containsEntry(filenameJoiner.join("path-filled", "report.txt"), "report content");
+    assertThat(files)
+        .containsEntry(
+            filenameJoiner.join("path-filled", "other", "file.txt"), "some other content");
+    assertThat(files).containsEntry(filenameJoiner.join("logs", "my-name.log"), "log data");
+    assertThat(files.get("index.html"))
+        .contains("<a href=\"path-filled/report.txt\">[filledReport]</a>");
+    assertThat(files.get("index.html")).contains("<a href=\"logs/my-name.log\">[log]</a>");
+    assertThat(files.get("index.html"))
+        .contains("<span class=\"report_link_broken\">[emptyReport]</span>");
+  }
+}

buildSrc/src/test/java/google/registry/gradle/plugin/GcsPluginUtilsTest.java

@@ -0,0 +1,298 @@
+// Copyright 2019 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.gradle.plugin;
+
+import static com.google.common.collect.ImmutableMap.toImmutableMap;
+import static com.google.common.truth.Truth.assertThat;
+import static google.registry.gradle.plugin.GcsPluginUtils.getContentType;
+import static google.registry.gradle.plugin.GcsPluginUtils.readFilesWithEntryPoint;
+import static google.registry.gradle.plugin.GcsPluginUtils.toByteArraySupplier;
+import static google.registry.gradle.plugin.GcsPluginUtils.toNormalizedPath;
+import static google.registry.gradle.plugin.GcsPluginUtils.uploadFileToGcs;
+import static google.registry.gradle.plugin.GcsPluginUtils.uploadFilesToGcsMultithread;
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static java.nio.file.Files.createDirectories;
+import static java.nio.file.Files.createDirectory;
+import static java.nio.file.Files.createFile;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.verifyNoMoreInteractions;
+
+import com.google.cloud.storage.BlobInfo;
+import com.google.cloud.storage.Storage;
+import com.google.common.base.Joiner;
+import com.google.common.collect.ImmutableMap;
+import java.io.File;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.util.Optional;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
+
+/** Tests for {@link GcsPluginUtilsTest} */
+final class GcsPluginUtilsTest {
+
+  private static final Joiner filenameJoiner = Joiner.on(File.separator);
+
+  @SuppressWarnings("WeakerAccess")
+  @TempDir
+  Path tmpDir;
+
+  @Test
+  void testGetContentType_knownTypes() {
+    assertThat(getContentType("path/to/file.html")).isEqualTo("text/html");
+    assertThat(getContentType("path/to/file.htm")).isEqualTo("text/html");
+    assertThat(getContentType("path/to/file.log")).isEqualTo("text/plain");
+    assertThat(getContentType("path/to/file.txt")).isEqualTo("text/plain");
+    assertThat(getContentType("path/to/file.css")).isEqualTo("text/css");
+    assertThat(getContentType("path/to/file.xml")).isEqualTo("text/xml");
+    assertThat(getContentType("path/to/file.zip")).isEqualTo("application/zip");
+    assertThat(getContentType("path/to/file.js")).isEqualTo("text/javascript");
+  }
+
+  @Test
+  void testGetContentType_unknownTypes() {
+    assertThat(getContentType("path/to/file.unknown")).isEqualTo("application/octet-stream");
+  }
+
+  @Test
+  void testUploadFileToGcs() {
+    Storage storage = mock(Storage.class);
+    uploadFileToGcs(
+        storage, "my-bucket", Paths.get("my", "filename.txt"), toByteArraySupplier("my data"));
+    verify(storage)
+        .create(
+            BlobInfo.newBuilder("my-bucket", "my/filename.txt")
+                .setContentType("text/plain")
+                .build(),
+            "my data".getBytes(UTF_8));
+    verifyNoMoreInteractions(storage);
+  }
+
+  @Test
+  void testUploadFilesToGcsMultithread() {
+    Storage storage = mock(Storage.class);
+    uploadFilesToGcsMultithread(
+        storage,
+        "my-bucket",
+        Paths.get("my", "folder"),
+        ImmutableMap.of(
+            Paths.get("some", "index.html"), toByteArraySupplier("some web page"),
+            Paths.get("some", "style.css"), toByteArraySupplier("some style"),
+            Paths.get("other", "index.html"), toByteArraySupplier("other web page"),
+            Paths.get("other", "style.css"), toByteArraySupplier("other style")));
+    verify(storage)
+        .create(
+            BlobInfo.newBuilder("my-bucket", "my/folder/some/index.html")
+                .setContentType("text/html")
+                .build(),
+            "some web page".getBytes(UTF_8));
+    verify(storage)
+        .create(
+            BlobInfo.newBuilder("my-bucket", "my/folder/some/style.css")
+                .setContentType("text/css")
+                .build(),
+            "some style".getBytes(UTF_8));
+    verify(storage)
+        .create(
+            BlobInfo.newBuilder("my-bucket", "my/folder/other/index.html")
+                .setContentType("text/html")
+                .build(),
+            "other web page".getBytes(UTF_8));
+    verify(storage)
+        .create(
+            BlobInfo.newBuilder("my-bucket", "my/folder/other/style.css")
+                .setContentType("text/css")
+                .build(),
+            "other style".getBytes(UTF_8));
+    verifyNoMoreInteractions(storage);
+  }
+
+  @Test
+  void testToByteArraySupplier_string() {
+    assertThat(toByteArraySupplier("my string").get()).isEqualTo("my string".getBytes(UTF_8));
+  }
+
+  @Test
+  void testToByteArraySupplier_stringSupplier() {
+    assertThat(toByteArraySupplier(() -> "my string").get()).isEqualTo("my string".getBytes(UTF_8));
+  }
+
+  @Test
+  void testToByteArraySupplier_file() throws Exception {
+    Path dir = createDirectory(tmpDir.resolve("arbitrary"));
+    Path file = createFile(dir.resolve("file.txt"));
+    Files.write(file, "some data".getBytes(UTF_8));
+    assertThat(toByteArraySupplier(file.toFile()).get()).isEqualTo("some data".getBytes(UTF_8));
+  }
+
+  private ImmutableMap<String, String> readAllFiles(FilesWithEntryPoint reportFiles) {
+    return reportFiles.files().entrySet().stream()
+        .collect(
+            toImmutableMap(
+                entry -> entry.getKey().toString(),
+                entry -> new String(entry.getValue().get(), UTF_8)));
+  }
+
+  @Test
+  void testCreateReportFiles_destinationIsFile() throws Exception {
+    Path root = toNormalizedPath(createDirectories(tmpDir.resolve("my/root")).toAbsolutePath());
+    Path somePath = createDirectories(root.resolve("some/path"));
+    Path destination = createFile(somePath.resolve("file.txt"));
+    Files.write(destination, "some data".getBytes(UTF_8));
+    // Since the entry point is obvious here - any hint given is just ignored.
+    File ignoredHint = createFile(root.resolve("ignored.txt")).toFile();
+
+    FilesWithEntryPoint files =
+        readFilesWithEntryPoint(destination.toFile(), Optional.of(ignoredHint), root);
+
+    assertThat(files.entryPoint().toString())
+        .isEqualTo(filenameJoiner.join("some", "path", "file.txt"));
+    assertThat(readAllFiles(files))
+        .containsExactly(filenameJoiner.join("some", "path", "file.txt"), "some data");
+  }
+
+  @Test
+  void testCreateReportFiles_destinationDoesntExist() throws Exception {
+    Path root = toNormalizedPath(createDirectories(tmpDir.resolve("my/root")).toAbsolutePath());
+    File destination = root.resolve("non/existing.txt").toFile();
+    assertThat(destination.isFile()).isFalse();
+    assertThat(destination.isDirectory()).isFalse();
+    // Since there are no files, any hint given is obviously wrong and will be ignored.
+    File ignoredHint = createFile(root.resolve("ignored.txt")).toFile();
+
+    FilesWithEntryPoint files =
+        readFilesWithEntryPoint(destination, Optional.of(ignoredHint), root);
+
+    assertThat(files.entryPoint().toString()).isEqualTo(filenameJoiner.join("non", "existing.txt"));
+    assertThat(files.files()).isEmpty();
+  }
+
+  @Test
+  void testCreateReportFiles_noFiles() throws Exception {
+    Path root = toNormalizedPath(createDirectories(tmpDir.resolve("my/root")).toAbsolutePath());
+    Path destination = createDirectories(root.resolve("some/path"));
+    createDirectories(destination.resolve("a/b"));
+    createDirectory(destination.resolve("c"));
+    // Since there are not files, any hint given is obviously wrong and will be ignored.
+    File ignoredHint = createFile(root.resolve("ignored.txt")).toFile();
+
+    FilesWithEntryPoint files =
+        readFilesWithEntryPoint(destination.toFile(), Optional.of(ignoredHint), root);
+
+    assertThat(files.entryPoint().toString()).isEqualTo(filenameJoiner.join("some", "path"));
+    assertThat(files.files()).isEmpty();
+  }
+
+  @Test
+  void testCreateReportFiles_oneFile() throws Exception {
+    Path root = toNormalizedPath(createDirectories(tmpDir.resolve("my/root")).toAbsolutePath());
+    Path destination = createDirectories(root.resolve("some/path"));
+    createDirectories(destination.resolve("a/b"));
+    createDirectory(destination.resolve("c"));
+    Files.write(createFile(destination.resolve("a/file.txt")), "some data".getBytes(UTF_8));
+    // Since the entry point is obvious here - any hint given is just ignored.
+    File ignoredHint = createFile(root.resolve("ignored.txt")).toFile();
+
+    FilesWithEntryPoint files =
+        readFilesWithEntryPoint(destination.toFile(), Optional.of(ignoredHint), root);
+
+    assertThat(files.entryPoint().toString())
+        .isEqualTo(filenameJoiner.join("some", "path", "a", "file.txt"));
+    assertThat(readAllFiles(files))
+        .containsExactly(filenameJoiner.join("some", "path", "a", "file.txt"), "some data");
+  }
+
+  /**
+   * Currently tests the "unimplemented" behavior.
+   *
+   * <p>TODO(guyben): switch to checking zip file instead.
+   */
+  @Test
+  void testCreateReportFiles_multipleFiles_noHint() throws Exception {
+    Path root = toNormalizedPath(createDirectories(tmpDir.resolve("my/root")).toAbsolutePath());
+    Path destination = createDirectories(root.resolve("some/path"));
+    createDirectories(destination.resolve("a/b"));
+    createDirectory(destination.resolve("c"));
+
+    Files.write(createFile(destination.resolve("index.html")), "some data".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("a/index.html")), "wrong index".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("c/style.css")), "css file".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("my_image.png")), "images".getBytes(UTF_8));
+
+    FilesWithEntryPoint files =
+        readFilesWithEntryPoint(destination.toFile(), Optional.empty(), root);
+
+    assertThat(files.entryPoint().toString())
+        .isEqualTo(filenameJoiner.join("some", "path", "path.zip"));
+    assertThat(readAllFiles(files).keySet())
+        .containsExactly(filenameJoiner.join("some", "path", "path.zip"));
+  }
+
+  /**
+   * Currently tests the "unimplemented" behavior.
+   *
+   * <p>TODO(guyben): switch to checking zip file instead.
+   */
+  @Test
+  void testCreateReportFiles_multipleFiles_withBadHint() throws Exception {
+    Path root = toNormalizedPath(createDirectories(tmpDir.resolve("my/root")).toAbsolutePath());
+    Path destination = createDirectories(root.resolve("some/path"));
+    // This entry point points to a directory, which isn't an appropriate entry point
+    File badEntryPoint = createDirectories(destination.resolve("a/b")).toFile();
+    createDirectory(destination.resolve("c"));
+
+    Files.write(createFile(destination.resolve("index.html")), "some data".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("a/index.html")), "wrong index".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("c/style.css")), "css file".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("my_image.png")), "images".getBytes(UTF_8));
+
+    FilesWithEntryPoint files =
+        readFilesWithEntryPoint(destination.toFile(), Optional.of(badEntryPoint), root);
+
+    assertThat(files.entryPoint().toString())
+        .isEqualTo(filenameJoiner.join("some", "path", "path.zip"));
+    assertThat(readAllFiles(files).keySet())
+        .containsExactly(filenameJoiner.join("some", "path", "path.zip"));
+  }
+
+  @Test
+  void testCreateReportFiles_multipleFiles_withGoodHint() throws Exception {
+    Path root = toNormalizedPath(createDirectories(tmpDir.resolve("my/root")).toAbsolutePath());
+    Path destination = createDirectories(root.resolve("some/path"));
+    createDirectories(destination.resolve("a/b"));
+    createDirectory(destination.resolve("c"));
+    // The hint is an actual file nested in the destination directory!
+    Path goodEntryPoint = createFile(destination.resolve("index.html"));
+
+    Files.write(goodEntryPoint, "some data".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("a/index.html")), "wrong index".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("c/style.css")), "css file".getBytes(UTF_8));
+    Files.write(createFile(destination.resolve("my_image.png")), "images".getBytes(UTF_8));
+
+    FilesWithEntryPoint files =
+        readFilesWithEntryPoint(destination.toFile(), Optional.of(goodEntryPoint.toFile()), root);
+
+    assertThat(files.entryPoint().toString())
+        .isEqualTo(filenameJoiner.join("some", "path", "index.html"));
+    assertThat(readAllFiles(files))
+        .containsExactly(
+            filenameJoiner.join("some", "path", "index.html"), "some data",
+            filenameJoiner.join("some", "path", "a", "index.html"), "wrong index",
+            filenameJoiner.join("some", "path", "c", "style.css"), "css file",
+            filenameJoiner.join("some", "path", "my_image.png"), "images");
+  }
+}

buildSrc/src/test/resources/mockito-extensions/org.mockito.plugins.MockMaker

@@ -0,0 +1 @@
+mock-maker-inline

buildscript-gradle.lockfile

@@ -1,62 +0,0 @@
-# This is a Gradle generated file for dependency locking.
-# Manual edits can break the build and are not advised.
-# This file is expected to be part of source control.
-com.diffplug.durian:durian-collect:1.2.0=classpath
-com.diffplug.durian:durian-core:1.2.0=classpath
-com.diffplug.durian:durian-io:1.2.0=classpath
-com.diffplug.durian:durian-swt.os:4.2.0=classpath
-com.diffplug.spotless:com.diffplug.spotless.gradle.plugin:6.20.0=classpath
-com.diffplug.spotless:spotless-lib-extra:2.40.0=classpath
-com.diffplug.spotless:spotless-lib:2.40.0=classpath
-com.diffplug.spotless:spotless-plugin-gradle:6.20.0=classpath
-com.dorongold.plugins:task-tree:2.1.0=classpath
-com.dorongold.task-tree:com.dorongold.task-tree.gradle.plugin:2.1.0=classpath
-com.github.johnrengelman.shadow:com.github.johnrengelman.shadow.gradle.plugin:8.1.1=classpath
-com.github.johnrengelman:shadow:8.1.1=classpath
-com.github.node-gradle.node:com.github.node-gradle.node.gradle.plugin:3.0.1=classpath
-com.github.node-gradle:gradle-node-plugin:3.0.1=classpath
-com.google.cloud.tools:appengine-gradle-plugin:2.4.1=classpath
-com.google.cloud.tools:appengine-plugins-core:0.9.1=classpath
-com.google.code.findbugs:jsr305:3.0.2=classpath
-com.google.code.gson:gson:2.8.6=classpath
-com.google.errorprone:error_prone_annotations:2.3.4=classpath
-com.google.guava:failureaccess:1.0.1=classpath
-com.google.guava:guava:28.2-jre=classpath
-com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=classpath
-com.google.j2objc:j2objc-annotations:1.3=classpath
-com.googlecode.concurrent-trees:concurrent-trees:2.6.1=classpath
-com.googlecode.javaewah:JavaEWAH:1.2.3=classpath
-com.squareup.okhttp3:okhttp:4.10.0=classpath
-com.squareup.okio:okio-jvm:3.0.0=classpath
-com.squareup.okio:okio:3.0.0=classpath
-commons-io:commons-io:2.11.0=classpath
-dev.equo.ide:solstice:1.3.1=classpath
-net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin:3.1.0=classpath
-net.ltgt.gradle:gradle-errorprone-plugin:3.1.0=classpath
-org.apache.ant:ant-launcher:1.10.13=classpath
-org.apache.ant:ant:1.10.13=classpath
-org.apache.commons:commons-compress:1.20=classpath
-org.apache.commons:commons-lang3:3.5=classpath
-org.checkerframework:checker-qual:2.10.0=classpath
-org.codehaus.plexus:plexus-utils:3.5.1=classpath
-org.eclipse.jgit:org.eclipse.jgit:6.6.0.202305301015-r=classpath
-org.eclipse.platform:org.eclipse.osgi:3.18.300=classpath
-org.glassfish:javax.json:1.0.4=classpath
-org.jdom:jdom2:2.0.6.1=classpath
-org.jetbrains.kotlin:kotlin-stdlib-common:1.6.20=classpath
-org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.5.31=classpath
-org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.5.31=classpath
-org.jetbrains.kotlin:kotlin-stdlib:1.6.20=classpath
-org.jetbrains:annotations:13.0=classpath
-org.ow2.asm:asm-commons:9.4=classpath
-org.ow2.asm:asm-tree:9.4=classpath
-org.ow2.asm:asm:9.4=classpath
-org.slf4j:slf4j-api:1.7.36=classpath
-org.sonatype.aether:aether-api:1.13.1=classpath
-org.sonatype.aether:aether-impl:1.13.1=classpath
-org.sonatype.aether:aether-spi:1.13.1=classpath
-org.sonatype.aether:aether-util:1.13.1=classpath
-org.tukaani:xz:1.9=classpath
-org.vafer:jdependency:2.8.0=classpath
-org.yaml:snakeyaml:1.21=classpath
-empty=

common/build.gradle

@@ -28,18 +28,15 @@ sourceSets {
 }
 
 configurations {
-  // For reasons I don't understand, testingCompileOnly is the configuration
-  // used for compiling the classes in the "testing" jar.
-  testingCompileOnly.extendsFrom implementation
-  testingRuntimeOnly.extendsFrom runtimeOnly
+  testingCompile.extendsFrom compile
+  testingRuntime.extendsFrom runtime
 
-  testImplementation.extendsFrom testingCompile
-  testRuntimeOnly.extendsFrom testingRuntime
+  testCompile.extendsFrom testingCompile
+  testRuntime.extendsFrom testingRuntime
 
   // All testing util classes. Other projects may declare dependency as:
-  // testImplementation project(path: 'common', configuration: 'testing')
-  create("testing")
-  testing.extendsFrom testingCompileOnly
+  // testCompile project(path: 'common', configuration: 'testing')
+  testing
 }
 
 task testingJar(type: Jar) {
@@ -54,16 +51,16 @@ artifacts {
 dependencies {
   def deps = rootProject.dependencyMap
 
-  implementation deps['com.github.ben-manes.caffeine:caffeine']
-  implementation deps['com.google.code.findbugs:jsr305']
-  implementation deps['com.google.guava:guava']
-  implementation deps['jakarta.inject:jakarta.inject-api']
-  implementation deps['joda-time:joda-time']
-  implementation deps['com.google.flogger:flogger']
-  implementation deps['io.github.java-diff-utils:java-diff-utils']
-  implementation deps['com.google.truth:truth']
+  compile deps['com.google.code.findbugs:jsr305']
+  compile deps['com.google.guava:guava']
+  compile deps['javax.inject:javax.inject']
+  compile deps['joda-time:joda-time']
 
-  testImplementation deps['org.junit.jupiter:junit-jupiter-api']
-  testImplementation deps['org.junit.jupiter:junit-jupiter-engine']
-  testImplementation deps['org.junit.platform:junit-platform-launcher']
+  testingCompile deps['com.google.flogger:flogger']
+  testingRuntime deps['com.google.flogger:flogger-system-backend']
+  testingCompile deps['com.google.truth:truth']
+  testingCompile deps['io.github.java-diff-utils:java-diff-utils']
+
+  testCompile deps['org.junit.jupiter:junit-jupiter-api']
+  testCompile deps['org.junit.jupiter:junit-jupiter-engine']
 }

common/buildscript-gradle.lockfile

@@ -1,4 +0,0 @@
-# This is a Gradle generated file for dependency locking.
-# Manual edits can break the build and are not advised.
-# This file is expected to be part of source control.
-empty=classpath

common/gradle.lockfile

@@ -1,70 +0,0 @@
-# This is a Gradle generated file for dependency locking.
-# Manual edits can break the build and are not advised.
-# This file is expected to be part of source control.
-aopalliance:aopalliance:1.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.github.ben-manes.caffeine:caffeine:3.0.5=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.github.ben-manes.caffeine:caffeine:3.2.2=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.github.kevinstern:software-and-algorithms:1.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.auto.service:auto-service-annotations:1.0.1=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.auto.value:auto-value-annotations:1.11.0=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.google.auto.value:auto-value-annotations:1.9=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.auto:auto-common:1.2.1=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.code.findbugs:jsr305:3.0.2=annotationProcessor,checkstyle,compileClasspath,deploy_jar,errorprone,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath,testing,testingAnnotationProcessor,testingCompileClasspath
-com.google.errorprone:error_prone_annotation:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.errorprone:error_prone_annotations:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.errorprone:error_prone_annotations:2.40.0=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.google.errorprone:error_prone_annotations:2.7.1=checkstyle
-com.google.errorprone:error_prone_check_api:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.errorprone:error_prone_core:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.errorprone:error_prone_type_annotations:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.errorprone:javac:9+181-r4173-1=errorproneJavac
-com.google.flogger:flogger:0.9=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.google.guava:failureaccess:1.0.1=annotationProcessor,checkstyle,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.guava:failureaccess:1.0.2=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.google.guava:guava-parent:32.1.1-jre=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.guava:guava:31.0.1-jre=checkstyle
-com.google.guava:guava:32.1.1-jre=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.guava:guava:33.2.1-android=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=checkstyle,compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.google.inject:guice:5.1.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.j2objc:j2objc-annotations:1.3=checkstyle
-com.google.j2objc:j2objc-annotations:3.0.0=compileClasspath,testCompileClasspath,testingCompileClasspath
-com.google.protobuf:protobuf-java:3.19.6=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-com.google.truth:truth:1.4.4=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-com.puppycrawl.tools:checkstyle:9.3=checkstyle
-commons-beanutils:commons-beanutils:1.9.4=checkstyle
-commons-collections:commons-collections:3.2.2=checkstyle
-info.picocli:picocli:4.6.2=checkstyle
-io.github.eisop:dataflow-errorprone:3.34.0-eisop1=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-io.github.java-diff-utils:java-diff-utils:4.12=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-io.github.java-diff-utils:java-diff-utils:4.16=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-jakarta.inject:jakarta.inject-api:2.0.1=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-javax.inject:javax.inject:1=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-joda-time:joda-time:2.14.0=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-junit:junit:4.13.2=testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-net.sf.saxon:Saxon-HE:10.6=checkstyle
-org.antlr:antlr4-runtime:4.9.3=checkstyle
-org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath
-org.checkerframework:checker-qual:3.12.0=checkstyle
-org.checkerframework:checker-qual:3.33.0=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-org.checkerframework:checker-qual:3.42.0=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-org.hamcrest:hamcrest-core:1.3=testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-org.jacoco:org.jacoco.agent:0.8.12=jacocoAgent,jacocoAnt
-org.jacoco:org.jacoco.ant:0.8.12=jacocoAnt
-org.jacoco:org.jacoco.core:0.8.12=jacocoAnt
-org.jacoco:org.jacoco.report:0.8.12=jacocoAnt
-org.javassist:javassist:3.28.0-GA=checkstyle
-org.jspecify:jspecify:1.0.0=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-org.junit.jupiter:junit-jupiter-api:5.13.4=testCompileClasspath,testRuntimeClasspath
-org.junit.jupiter:junit-jupiter-engine:5.13.4=testCompileClasspath,testRuntimeClasspath
-org.junit.platform:junit-platform-commons:1.13.4=testCompileClasspath,testRuntimeClasspath
-org.junit.platform:junit-platform-engine:1.13.4=testCompileClasspath,testRuntimeClasspath
-org.junit.platform:junit-platform-launcher:1.13.4=testCompileClasspath,testRuntimeClasspath
-org.junit:junit-bom:5.13.4=testCompileClasspath,testRuntimeClasspath
-org.opentest4j:opentest4j:1.3.0=testCompileClasspath,testRuntimeClasspath
-org.ow2.asm:asm-commons:9.7=jacocoAnt
-org.ow2.asm:asm-tree:9.7=jacocoAnt
-org.ow2.asm:asm:9.7=compileClasspath,deploy_jar,jacocoAnt,runtimeClasspath,testCompileClasspath,testRuntimeClasspath,testing,testingCompileClasspath
-org.pcollections:pcollections:3.1.4=annotationProcessor,errorprone,testAnnotationProcessor,testingAnnotationProcessor
-org.reflections:reflections:0.10.2=checkstyle
-empty=testingCompile,testingRuntime,testingRuntimeClasspath

common/gradle/dependency-locks/annotationProcessor.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.github.ben-manes.caffeine:caffeine:2.7.0
+com.github.kevinstern:software-and-algorithms:1.0
+com.google.auto:auto-common:0.10
+com.google.code.findbugs:jFormatString:3.0.0
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotation:2.3.4
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.errorprone:error_prone_check_api:2.3.4
+com.google.errorprone:error_prone_core:2.3.4
+com.google.errorprone:error_prone_type_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.0.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.1
+com.google.protobuf:protobuf-java:3.4.0
+com.googlecode.java-diff-utils:diffutils:1.3.0
+org.checkerframework:checker-qual:3.0.0
+org.checkerframework:dataflow:3.0.0
+org.checkerframework:javacutil:3.0.0
+org.codehaus.mojo:animal-sniffer-annotations:1.17
+org.pcollections:pcollections:2.1.2
+org.plumelib:plume-util:1.0.6
+org.plumelib:reflection-util:0.0.2
+org.plumelib:require-javadoc:0.1.0

common/gradle/dependency-locks/archives.lockfile

@@ -0,0 +1,3 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.

common/gradle/dependency-locks/buildscript-classpath.lockfile

@@ -0,0 +1,3 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.

common/gradle/dependency-locks/checkstyle.lockfile

@@ -0,0 +1,19 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+antlr:antlr:2.7.7
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:29.0-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.puppycrawl.tools:checkstyle:8.37
+commons-beanutils:commons-beanutils:1.9.4
+commons-collections:commons-collections:3.2.2
+info.picocli:picocli:4.5.2
+net.sf.saxon:Saxon-HE:10.3
+org.antlr:antlr4-runtime:4.8-1
+org.checkerframework:checker-qual:2.11.1
+org.javassist:javassist:3.26.0-GA
+org.reflections:reflections:0.9.12

common/gradle/dependency-locks/compile.lockfile

@@ -0,0 +1,12 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+org.checkerframework:checker-qual:3.8.0

common/gradle/dependency-locks/compileClasspath.lockfile

@@ -0,0 +1,12 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+org.checkerframework:checker-qual:3.8.0

common/gradle/dependency-locks/compileOnly.lockfile

@@ -0,0 +1,3 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.

common/gradle/dependency-locks/default.lockfile

@@ -0,0 +1,12 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+org.checkerframework:checker-qual:3.8.0

common/gradle/dependency-locks/deploy_jar.lockfile

@@ -0,0 +1,12 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+org.checkerframework:checker-qual:3.8.0

common/gradle/dependency-locks/errorprone.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.github.ben-manes.caffeine:caffeine:2.7.0
+com.github.kevinstern:software-and-algorithms:1.0
+com.google.auto:auto-common:0.10
+com.google.code.findbugs:jFormatString:3.0.0
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotation:2.3.4
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.errorprone:error_prone_check_api:2.3.4
+com.google.errorprone:error_prone_core:2.3.4
+com.google.errorprone:error_prone_type_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.0.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.1
+com.google.protobuf:protobuf-java:3.4.0
+com.googlecode.java-diff-utils:diffutils:1.3.0
+org.checkerframework:checker-qual:3.0.0
+org.checkerframework:dataflow:3.0.0
+org.checkerframework:javacutil:3.0.0
+org.codehaus.mojo:animal-sniffer-annotations:1.17
+org.pcollections:pcollections:2.1.2
+org.plumelib:plume-util:1.0.6
+org.plumelib:reflection-util:0.0.2
+org.plumelib:require-javadoc:0.1.0

common/gradle/dependency-locks/errorproneJavac.lockfile

@@ -0,0 +1,3 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.

common/gradle/dependency-locks/jacocoAgent.lockfile

@@ -0,0 +1,4 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+org.jacoco:org.jacoco.agent:0.8.6

common/gradle/dependency-locks/jacocoAnt.lockfile

@@ -0,0 +1,11 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+org.jacoco:org.jacoco.agent:0.8.6
+org.jacoco:org.jacoco.ant:0.8.6
+org.jacoco:org.jacoco.core:0.8.6
+org.jacoco:org.jacoco.report:0.8.6
+org.ow2.asm:asm-analysis:8.0.1
+org.ow2.asm:asm-commons:8.0.1
+org.ow2.asm:asm-tree:8.0.1
+org.ow2.asm:asm:8.0.1

common/gradle/dependency-locks/runtime.lockfile

@@ -0,0 +1,12 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+org.checkerframework:checker-qual:3.8.0

common/gradle/dependency-locks/runtimeClasspath.lockfile

@@ -0,0 +1,12 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+org.checkerframework:checker-qual:3.8.0

common/gradle/dependency-locks/testAnnotationProcessor.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.github.ben-manes.caffeine:caffeine:2.7.0
+com.github.kevinstern:software-and-algorithms:1.0
+com.google.auto:auto-common:0.10
+com.google.code.findbugs:jFormatString:3.0.0
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotation:2.3.4
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.errorprone:error_prone_check_api:2.3.4
+com.google.errorprone:error_prone_core:2.3.4
+com.google.errorprone:error_prone_type_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.0.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.1
+com.google.protobuf:protobuf-java:3.4.0
+com.googlecode.java-diff-utils:diffutils:1.3.0
+org.checkerframework:checker-qual:3.0.0
+org.checkerframework:dataflow:3.0.0
+org.checkerframework:javacutil:3.0.0
+org.codehaus.mojo:animal-sniffer-annotations:1.17
+org.pcollections:pcollections:2.1.2
+org.plumelib:plume-util:1.0.6
+org.plumelib:reflection-util:0.0.2
+org.plumelib:require-javadoc:0.1.0

common/gradle/dependency-locks/testCompile.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm:9.0

common/gradle/dependency-locks/testCompileClasspath.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm:9.0

common/gradle/dependency-locks/testCompileOnly.lockfile

@@ -0,0 +1,3 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.

common/gradle/dependency-locks/testRuntime.lockfile

@@ -0,0 +1,28 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger-system-backend:0.7.4
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm:9.0

common/gradle/dependency-locks/testRuntimeClasspath.lockfile

@@ -0,0 +1,28 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger-system-backend:0.7.4
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.apiguardian:apiguardian-api:1.1.0
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.junit.jupiter:junit-jupiter-api:5.6.2
+org.junit.jupiter:junit-jupiter-engine:5.6.2
+org.junit.platform:junit-platform-commons:1.6.2
+org.junit.platform:junit-platform-engine:1.6.2
+org.junit:junit-bom:5.6.2
+org.opentest4j:opentest4j:1.2.0
+org.ow2.asm:asm:9.0

common/gradle/dependency-locks/testing.lockfile

@@ -0,0 +1,3 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.

common/gradle/dependency-locks/testingAnnotationProcessor.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.github.ben-manes.caffeine:caffeine:2.7.0
+com.github.kevinstern:software-and-algorithms:1.0
+com.google.auto:auto-common:0.10
+com.google.code.findbugs:jFormatString:3.0.0
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotation:2.3.4
+com.google.errorprone:error_prone_annotations:2.3.4
+com.google.errorprone:error_prone_check_api:2.3.4
+com.google.errorprone:error_prone_core:2.3.4
+com.google.errorprone:error_prone_type_annotations:2.3.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:27.0.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.1
+com.google.protobuf:protobuf-java:3.4.0
+com.googlecode.java-diff-utils:diffutils:1.3.0
+org.checkerframework:checker-qual:3.0.0
+org.checkerframework:dataflow:3.0.0
+org.checkerframework:javacutil:3.0.0
+org.codehaus.mojo:animal-sniffer-annotations:1.17
+org.pcollections:pcollections:2.1.2
+org.plumelib:plume-util:1.0.6
+org.plumelib:reflection-util:0.0.2
+org.plumelib:require-javadoc:0.1.0

common/gradle/dependency-locks/testingCompile.lockfile

@@ -0,0 +1,20 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.ow2.asm:asm:9.0

common/gradle/dependency-locks/testingCompileClasspath.lockfile

@@ -0,0 +1,20 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.ow2.asm:asm:9.0

common/gradle/dependency-locks/testingCompileOnly.lockfile

@@ -0,0 +1,3 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.

common/gradle/dependency-locks/testingRuntime.lockfile

@@ -0,0 +1,21 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger-system-backend:0.7.4
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.ow2.asm:asm:9.0

common/gradle/dependency-locks/testingRuntimeClasspath.lockfile

@@ -0,0 +1,21 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.google.auto.value:auto-value-annotations:1.7.4
+com.google.code.findbugs:jsr305:3.0.2
+com.google.errorprone:error_prone_annotations:2.5.1
+com.google.flogger:flogger-system-backend:0.7.4
+com.google.flogger:flogger:0.7.4
+com.google.guava:failureaccess:1.0.1
+com.google.guava:guava:30.1.1-jre
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+com.google.j2objc:j2objc-annotations:1.3
+com.google.truth:truth:1.1.2
+io.github.java-diff-utils:java-diff-utils:4.9
+javax.inject:javax.inject:1
+joda-time:joda-time:2.9.2
+junit:junit:4.13.1
+org.checkerframework:checker-compat-qual:2.5.3
+org.checkerframework:checker-qual:3.9.1
+org.hamcrest:hamcrest-core:1.3
+org.ow2.asm:asm:9.0

common/src/main/java/google/registry/util/BatchedStreams.java

@@ -1,43 +0,0 @@
-// Copyright 2023 The Nomulus Authors. All Rights Reserved.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-package google.registry.util;
-
-import static com.google.common.base.Preconditions.checkArgument;
-import static com.google.common.collect.Iterators.partition;
-import static com.google.common.collect.Iterators.transform;
-import static com.google.common.collect.Streams.stream;
-import static java.lang.Math.min;
-
-import com.google.common.collect.ImmutableList;
-import java.util.stream.Stream;
-
-/** Utilities for breaking up a {@link Stream} into batches. */
-public final class BatchedStreams {
-
-  static final int MAX_BATCH = 1024 * 1024;
-
-  private BatchedStreams() {}
-
-  /**
-   * Transform a flat {@link Stream} into a {@code Stream} of batches.
-   *
-   * <p>Closing the returned stream does not close the original stream.
-   */
-  public static <T> Stream<ImmutableList<T>> toBatches(Stream<T> stream, int batchSize) {
-    checkArgument(batchSize > 0, "batchSize must be a positive integer.");
-    return stream(
-        transform(partition(stream.iterator(), min(MAX_BATCH, batchSize)), ImmutableList::copyOf));
-  }
-}

common/src/main/java/google/registry/util/DateTimeUtils.java

@@ -19,13 +19,15 @@ import static com.google.common.base.Preconditions.checkArgument;
 import com.google.common.collect.Iterables;
 import com.google.common.collect.Lists;
 import com.google.common.collect.Ordering;
-import java.sql.Date;
+import java.time.ZoneId;
+import java.time.ZonedDateTime;
+import java.util.TimeZone;
 import org.joda.time.DateTime;
 import org.joda.time.DateTimeZone;
 import org.joda.time.LocalDate;
 
 /** Utilities methods and constants related to Joda {@link DateTime} objects. */
-public abstract class DateTimeUtils {
+public class DateTimeUtils {
 
   /** The start of the epoch, in a convenient constant. */
   public static final DateTime START_OF_TIME = new DateTime(0, DateTimeZone.UTC);
@@ -33,9 +35,9 @@ public abstract class DateTimeUtils {
   /**
    * A date in the far future that we can treat as infinity.
    *
-   * <p>This value is (2^63-1)/1000 rounded down. Postgres can store dates as 64 bit microseconds,
-   * but Java uses milliseconds, so this is the largest representable date that will survive a
-   * round-trip through the database.
+   * <p>This value is (2^63-1)/1000 rounded down. AppEngine stores dates as 64 bit microseconds, but
+   * Java uses milliseconds, so this is the largest representable date that will survive a
+   * round-trip through Datastore.
    */
   public static final DateTime END_OF_TIME = new DateTime(Long.MAX_VALUE / 1000, DateTimeZone.UTC);
 
@@ -89,11 +91,39 @@ public abstract class DateTimeUtils {
     return years == 0 ? now : now.minusYears(1).minusYears(years - 1);
   }
 
-  public static Date toSqlDate(LocalDate localDate) {
-    return new Date(localDate.toDateTimeAtStartOfDay().getMillis());
+  /**
+   * Converts a Joda {@link DateTime} object to an equivalent java.time {@link ZonedDateTime}
+   * object.
+   */
+  public static ZonedDateTime toZonedDateTime(DateTime dateTime) {
+    java.time.Instant instant = java.time.Instant.ofEpochMilli(dateTime.getMillis());
+    return ZonedDateTime.ofInstant(instant, ZoneId.of(dateTime.getZone().getID()).normalized());
   }
 
-  public static LocalDate toLocalDate(Date date) {
+  /**
+   * Converts a Joda {@link DateTime} object to an equivalent java.time {@link ZonedDateTime}
+   * object.
+   */
+  public static ZonedDateTime toZonedDateTime(DateTime dateTime, ZoneId zoneId) {
+    java.time.Instant instant = java.time.Instant.ofEpochMilli(dateTime.getMillis());
+    return ZonedDateTime.ofInstant(instant, zoneId);
+  }
+
+  /**
+   * Converts a java.time {@link ZonedDateTime} object to an equivalent Joda {@link DateTime}
+   * object.
+   */
+  public static DateTime toJodaDateTime(ZonedDateTime zonedDateTime) {
+    return new DateTime(
+        zonedDateTime.toInstant().toEpochMilli(),
+        DateTimeZone.forTimeZone(TimeZone.getTimeZone(zonedDateTime.getZone())));
+  }
+
+  public static java.sql.Date toSqlDate(LocalDate localDate) {
+    return new java.sql.Date(localDate.toDateTimeAtStartOfDay().getMillis());
+  }
+
+  public static LocalDate toLocalDate(java.sql.Date date) {
     return new LocalDate(date.getTime(), DateTimeZone.UTC);
   }
 }

common/src/main/java/google/registry/util/SystemClock.java

@@ -16,8 +16,8 @@ package google.registry.util;
 
 import static org.joda.time.DateTimeZone.UTC;
 
-import jakarta.inject.Inject;
 import javax.annotation.concurrent.ThreadSafe;
+import javax.inject.Inject;
 import org.joda.time.DateTime;
 
 /** Clock implementation that proxies to the real system clock. */

common/src/main/java/google/registry/util/SystemSleeper.java

@@ -17,9 +17,9 @@ package google.registry.util;
 import static com.google.common.base.Preconditions.checkArgument;
 
 import com.google.common.util.concurrent.Uninterruptibles;
-import jakarta.inject.Inject;
 import java.io.Serializable;
 import javax.annotation.concurrent.ThreadSafe;
+import javax.inject.Inject;
 import org.joda.time.ReadableDuration;
 
 /** Implementation of {@link Sleeper} for production use. */

common/src/test/java/google/registry/util/BatchedStreamsTest.java

@@ -1,65 +0,0 @@
-// Copyright 2023 The Nomulus Authors. All Rights Reserved.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-package google.registry.util;
-
-import static com.google.common.truth.Truth.assertThat;
-import static google.registry.util.BatchedStreams.toBatches;
-import static java.util.stream.Collectors.counting;
-import static java.util.stream.Collectors.groupingBy;
-import static org.junit.Assert.assertThrows;
-
-import com.google.common.collect.ImmutableList;
-import java.util.stream.IntStream;
-import java.util.stream.Stream;
-import org.junit.jupiter.api.Test;
-
-/** Unit tests for {@link BatchedStreams}. */
-public class BatchedStreamsTest {
-
-  @Test
-  void invalidBatchSize() {
-    assertThat(assertThrows(IllegalArgumentException.class, () -> toBatches(Stream.of(), 0)))
-        .hasMessageThat()
-        .contains("must be a positive integer");
-  }
-
-  @Test
-  void batch_success() {
-    // 900_002 elements -> 900 1K-batches + 1 2-element-batch
-    Stream<Integer> data = IntStream.rangeClosed(0, 900_001).boxed();
-    assertThat(
-            toBatches(data, 1000).map(ImmutableList::size).collect(groupingBy(x -> x, counting())))
-        .containsExactly(1000, 900L, 2, 1L);
-  }
-
-  @Test
-  void batch_partialBatch() {
-    Stream<Integer> data = Stream.of(1, 2, 3);
-    assertThat(
-            toBatches(data, 1000).map(ImmutableList::size).collect(groupingBy(x -> x, counting())))
-        .containsExactly(3, 1L);
-  }
-
-  @Test
-  void batch_truncateBatchSize() {
-    // 2M elements -> 2 1M-batches despite the user-specified 2M batch size.
-    Stream<Integer> data = IntStream.range(0, 1024 * 2048).boxed();
-    assertThat(
-            toBatches(data, 2_000_000)
-                .map(ImmutableList::size)
-                .collect(groupingBy(x -> x, counting())))
-        .containsExactly(1024 * 1024, 2L);
-  }
-}

common/src/test/resources/google/registry/testing/truth/text-diff-expected.txt

@@ -1,2 +1,3 @@
 This is a random file,
-with three lines and terminates without a newline.
+
+with three lines and terminates without a newline.

common/src/test/resources/google/registry/testing/truth/text-sidebyside-diff.txt

@@ -1,4 +1,5 @@
 |Expected                                              |Actual                                               |
 |------------------------------------------------------|-----------------------------------------------------|
 |This is a random file,                                |This is a random file,                               |
-|with ~three~ lines and terminates ~without~ a newline.|with **two** lines and terminates **with** a newline.|
+|                                                      |with **two** lines and terminates **with** a newline.|
+|with ~three~ lines and terminates ~without~ a newline.|                                                     |

common/src/test/resources/google/registry/testing/truth/text-unified-diff.txt

@@ -1,5 +1,6 @@
 --- expected
 +++ actual
-@@ -2,1 +2,1 @@
+@@ -2,2 +2,1 @@
+-
 -with three lines and terminates without a newline.
 +with two lines and terminates with a newline.

common/src/testing/java/google/registry/testing/SystemInfo.java

@@ -14,8 +14,9 @@
 
 package google.registry.testing;
 
-import com.github.benmanes.caffeine.cache.Caffeine;
-import com.github.benmanes.caffeine.cache.LoadingCache;
+import com.google.common.cache.CacheBuilder;
+import com.google.common.cache.CacheLoader;
+import com.google.common.cache.LoadingCache;
 import com.google.common.flogger.FluentLogger;
 import java.io.IOException;
 import java.util.concurrent.ExecutionException;
@@ -28,28 +29,33 @@ public final class SystemInfo {
   private static final FluentLogger logger = FluentLogger.forEnclosingClass();
 
   private static final LoadingCache<String, Boolean> hasCommandCache =
-      Caffeine.newBuilder()
+      CacheBuilder.newBuilder()
           .build(
-              cmd -> {
-                try {
-                  Process pid = Runtime.getRuntime().exec(cmd.split(" "));
-                  pid.getOutputStream().close();
-                  pid.waitFor();
-                } catch (IOException e) {
-                  logger.atWarning().withCause(e).log("%s command not available.", cmd);
-                  return false;
+              new CacheLoader<String, Boolean>() {
+                @Override
+                public Boolean load(String cmd) throws InterruptedException {
+                  try {
+                    Process pid = Runtime.getRuntime().exec(cmd);
+                    pid.getOutputStream().close();
+                    pid.waitFor();
+                  } catch (IOException e) {
+                    logger.atWarning().withCause(e).log("%s command not available.", cmd);
+                    return false;
+                  }
+                  return true;
                 }
-                return true;
               });
 
   /**
-   * Returns {@code true} if system command can be run from the path.
+   * Returns {@code true} if system command can be run from path.
    *
-   * <p><b>Warning:</b> The command is actually run! So there could be side effects. You might need
-   * to specify a version flag or something. Return code is ignored.
+   * <p><b>Warning:</b> The command is actually run! So there could be side-effects. You might
+   * need to specify a version flag or something. Return code is ignored.
    *
-   * <p>This result is a memoized. If multiple threads try to get the same result at once, the heavy
-   * lifting will only be performed by the first thread and the rest will wait.
+   * <p>This result is a memoized. If multiple therads try to get the same result at once, the
+   * heavy lifting will only be performed by the first thread and the rest will wait.
+   *
+   * @throws ExecutionException
    */
   public static boolean hasCommand(String cmd) throws ExecutionException {
     return hasCommandCache.get(cmd);

common/src/testing/java/google/registry/testing/truth/TextDiffSubject.java

@@ -63,7 +63,6 @@ public class TextDiffSubject extends Subject {
 
   private final ImmutableList<String> actual;
   private DiffFormat diffFormat = DiffFormat.SIDE_BY_SIDE_MARKDOWN;
-  private ImmutableList<String> comments = ImmutableList.of();
 
   protected TextDiffSubject(FailureMetadata metadata, List<String> actual) {
     super(metadata, actual);
@@ -84,27 +83,13 @@ public class TextDiffSubject extends Subject {
     return this;
   }
 
-  /** If set, ignore lines that start with the given string. */
-  public TextDiffSubject ignoringLinesStartingWith(String... comments) {
-    this.comments = ImmutableList.copyOf(comments);
-    return this;
-  }
-
-  private ImmutableList<String> filterComments(List<String> lines) {
-    return lines.stream()
-        .filter(line -> !line.isBlank())
-        .filter(line -> comments.stream().noneMatch(line::startsWith))
-        .collect(ImmutableList.toImmutableList());
-  }
-
   public void hasSameContentAs(List<String> expectedContent) {
     checkNotNull(expectedContent, "expectedContent");
-    ImmutableList<String> filteredExpected = filterComments(expectedContent);
-    ImmutableList<String> filteredActual = filterComments(actual);
-    if (filteredExpected.equals(filteredActual)) {
+    ImmutableList<String> expected = ImmutableList.copyOf(expectedContent);
+    if (expected.equals(actual)) {
       return;
     }
-    String diffString = diffFormat.generateDiff(filteredExpected, filteredActual);
+    String diffString = diffFormat.generateDiff(expected, actual);
     failWithoutActual(
         Fact.simpleFact(
             Joiner.on('\n')
@@ -190,7 +175,14 @@ public class TextDiffSubject extends Subject {
         .orElse(0);
   }
 
-  private record SideBySideRowFormatter(int maxExpectedLineLength, int maxActualLineLength) {
+  private static class SideBySideRowFormatter {
+    private final int maxExpectedLineLength;
+    private final int maxActualLineLength;
+
+    private SideBySideRowFormatter(int maxExpectedLineLength, int maxActualLineLength) {
+      this.maxExpectedLineLength = maxExpectedLineLength;
+      this.maxActualLineLength = maxActualLineLength;
+    }
 
     public String formatRow(String expected, String actual, char padChar) {
       return String.format(

config/checkstyle/checkstyle.xml

@@ -43,6 +43,12 @@ by Joshua Bloch in his book Effective Java -->
     <property name="message" value='Your Javadocs appear to use invalid &lt;a&gt; tag syntax in @see tags. Please use the correct syntax: @see &lt;a href="http(s)://your_url"&gt;url_description&lt;/a&gt;'/>
   </module>
 
+  <!-- Checks that our Ofy wrapper is used instead of the "real" ofy(). -->
+  <module name="RegexpSingleline">
+    <property name="format" value="com\.googlecode\.objectify\.ObjectifyService\.ofy"/>
+    <property name="message" value="Use google.registry.model.ofy.ObjectifyService.ofy(). Do not use com.googlecode.objectify.v4.ObjectifyService.ofy()."/>
+  </module>
+
   <!-- Checks that java.util.Optional is used instead of Guava's Optional. -->
   <module name="RegexpSingleline">
     <property name="format" value="com\.google\.common\.base\.Optional"/>
@@ -52,7 +58,13 @@ by Joshua Bloch in his book Effective Java -->
   <!-- Checks that the deprecated ExpectedException is not used. -->
   <module name="RegexpSingleline">
     <property name="format" value="org\.junit\.rules\.ExpectedException"/>
-    <property name="message" value="Use assertThrows and expectThrows instead of the deprecated methods on ExpectedException."/>
+    <property name="message" value="Use assertThrows and expectThrows from JUnitBackports instead of the deprecated methods on ExpectedException."/>
+  </module>
+
+  <!-- Checks that the deprecated MockitoJUnitRunner is not used. -->
+  <module name="RegexpSingleline">
+    <property name="format" value="MockitoJUnitRunner"/>
+    <property name="message" value="MockitoJUnitRunner is deprecated. Use @RunWith(JUnit4.class) and MockitoRule instead."/>
   </module>
 
   <module name="LineLength">

config/checkstyle/suppressions.xml

@@ -9,4 +9,6 @@
   <suppress files="[/\\].*[/\\]generated.*[/\\]" checks="."/>
   <!-- Ignore Javadoc checks in test files -->
   <suppress files="[/\\].*[/\\]src/test/java/.*[/\\]" checks="JavadocType"/>
+  <!-- ofy() regex check doesn't apply to these files -->
+  <suppress files="AugmentedDeleter.java|AugmentedSaver.java|Ofy.java" checks="RegexpSingleline"/>
 </suppressions>

config/dependency-license/allowed_licenses.json

@@ -27,9 +27,6 @@
     {
       "moduleLicense": "Apache License V2.0"
     },
-    {
-      "moduleLicense": "Apache License Version 2.0"
-    },
     {
       "moduleLicense": "Apache License, Version 2.0"
     },
@@ -72,12 +69,6 @@
     {
       "moduleLicense": "BSD 3-clause New License"
     },
-    {
-      "moduleLicense": "BSD-3-Clause"
-    },
-    {
-      "moduleLicense": "BSD-3-Clause;link=\"https://raw.githubusercontent.com/dnsjava/dnsjava/master/LICENSE\""
-    },
     {
       "moduleLicense": "3-Clause BSD License"
     },
@@ -105,12 +96,6 @@
     {
       "moduleLicense": "BSD-2-Clause"
     },
-    {
-      "moduleLicense": "BSD 3-Clause \"New\" or \"Revised\" License (BSD-3-Clause)"
-    },
-    {
-      "moduleLicense": "BSD licence"
-    },
     {
       "moduleLicense": "New BSD License"
     },
@@ -126,9 +111,6 @@
     {
       "moduleLicense": "The PostgreSQL License"
     },
-    {
-      "moduleLicense": "CC0"
-    },
     {
       "moduleLicense": "CC0 1.0 Universal License"
     },
@@ -150,9 +132,6 @@
     {
       "moduleLicense": "\\n                Dual license consisting of the CDDL v1.1 and GPL v2\\n            "
     },
-    {
-      "moduleLicense": "EPL-2.0"
-    },
     {
       "moduleLicense": "Eclipse Distribution License (New BSD License)"
     },
@@ -204,9 +183,6 @@
     {
       "moduleLicense": "GNU GENERAL PUBLIC LICENSE, Version 2 + Classpath Exception"
     },
-    {
-      "moduleLicense": "(GPL-2.0-only WITH Classpath-exception-2.0)"
-    },
     {
       "moduleLicense": "GNU Library General Public License v2.1 or later"
     },
@@ -222,9 +198,6 @@
     {
       "moduleLicense": "GNU Library General Public License v2.1 or later"
     },
-    {
-      "moduleLicense": "GNU Lesser General Public License v3.0"
-    },
     // This is just 3-clause BSD.
     {
       "moduleLicense": "Go License"
@@ -277,12 +250,6 @@
     {
       "moduleLicense": "Unicode/ICU License"
     },
-    {
-      "moduleLicense": "Unicode-3.0"
-    },
-    {
-      "moduleLicense": "The W3C Software License"
-    },
     {
       "moduleLicense": "Public Domain",
       "moduleName": "aopalliance:aopalliance"
@@ -291,10 +258,6 @@
       "moduleLicense": "Public Domain",
       "moduleName": "org.tukaani:xz"
     },
-    {
-      "moduleLicense": "Public Domain",
-      "moduleName": "org.json:json"
-    },
     {
       // "Apache License, Version 2.0". The plugin is able to parse up to
       // 2.11.3 correctly but then something changed with 2.12.* and it no
@@ -302,115 +265,13 @@
       "moduleLicense": null,
       "moduleName": "com.fasterxml.jackson:jackson-bom"
     },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleName": "com.google.cloud:libraries-bom"
-    },
-    {
-      // Part of Guava with "Apache License, Version 2.0". The plugin is unable
-      // to parse its license for unknown reason.
-      "moduleLicense": null,
-      "moduleName": "com.google.guava:guava-parent"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "2.10.0",
-      "moduleName": "com.google.gwt:gwt-user"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleName": "com.squareup.okhttp3:okhttp"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "1.15.1",
-      "moduleName": "com.squareup:kotlinpoet"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleName": "com.squareup.okio:okio"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "3.0.0",
-      "moduleName": "com.squareup.okio:okio-bom"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "3.4.0",
-      "moduleName": "com.squareup.okio:okio-fakefilesystem"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "4.9.3",
-      "moduleName": "com.squareup.wire:wire-runtime"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "4.8.0",
-      "moduleName": "com.squareup.wire:wire-schema"
-    },
-    {
-      // "Apache License, Version 2.0". The plugin is able to parse up to
-      // 2.0.33.Final but not this verson.
-      "moduleLicense": null,
-      "moduleVersion": "2.0.46.Final",
-      "moduleName": "io.netty:netty-tcnative-classes"
-    },
-    // "Apache License, Version 2.0".
-    {
-      "moduleLicense": null,
-      "moduleName": "io.opentelemetry:opentelemetry-bom"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "1.4",
-      "moduleName": "jakarta-regexp:jakarta-regexp"
-    },
     {
       // Actually Eclipse Public License v2.0
       "moduleLicense": null,
       "moduleName": "org.junit:junit-bom"
     },
     {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "1.4.0",
-      "moduleName": "org.jetbrains.kotlin:kotlin-bom"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "1.9.20",
-      "moduleName": "org.jetbrains.kotlin:kotlin-stdlib-common"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "1.5.2",
-      "moduleName": "org.jetbrains.kotlinx:kotlinx-coroutines-core"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "0.4.0",
-      "moduleName": "org.jetbrains.kotlinx:kotlinx-datetime"
-    },
-    {
-      // "Apache License, Version 2.0".
-      "moduleLicense": null,
-      "moduleVersion": "1.0.1",
-      "moduleName": "org.jetbrains.kotlinx:kotlinx-serialization-core"
+      "moduleLicense": "The W3C Software License"
     }
   ]
 }

config/nom_build.py

@@ -47,7 +47,7 @@ class GradleFlag:
 
 
 PROPERTIES_HEADER = """\
-# This file defines properties used by the gradle build. It must be kept in
+# This file defines properties used by the gradle build.  It must be kept in
 # sync with config/nom_build.py.
 #
 # To regenerate, run ./nom_build --generate-gradle-properties
@@ -56,9 +56,7 @@ PROPERTIES_HEADER = """\
 # nom_build), run ./nom_build --help.
 #
 # DO NOT EDIT THIS FILE BY HAND
-org.gradle.jvmargs=-Xmx4096m
-org.gradle.caching=true
-org.gradle.parallel=true
+org.gradle.jvmargs=-Xmx1024m
 """
 
 # Help text to be displayed (in addition to the synopsis and flag help, which
@@ -85,14 +83,19 @@ PROPERTIES = [
     Property('pluginsUrl',
              'URL to use for the gradle plugins repository (defaults to maven '
              'central, see also mavenUrl'),
-    Property('allowInsecureProtocol',
-             'Allow connecting to plain HTTP repositories.  This is provided '
-             'to allow us to communicate to a local proxy when doing '
-             'dependency updates.'),
+    Property('uploaderDestination',
+             'Location to upload test reports to.  Normally this should be a '
+             'GCS url (see also uploaderCredentialsFile)'),
+    Property('uploaderCredentialsFile',
+             'json credentials file to use to upload test reports.'),
+    Property('uploaderMultithreadedUpload',
+             'Whether to enable multithread upload.'),
     Property('verboseTestOutput',
              'If true, show all test output in near-realtime.',
              'false',
              bool),
+    Property('flowDocsFile',
+             'Output filename for the flowDocsTool command.'),
     Property('enableDependencyLocking',
              'Enables dependency locking.',
              'true',
@@ -104,7 +107,7 @@ PROPERTIES = [
     Property('testFilter',
              'Comma separated list of test patterns, if specified run only '
              'these.'),
-    Property('environment', 'Environment for deployment and staging.'),
+    Property('environment', 'GAE Environment for deployment and staging.'),
 
     # Cloud SQL properties
     Property('dbServer',
@@ -117,19 +120,28 @@ PROPERTIES = [
     Property('dbUser', 'Database user name for use in connection'),
     Property('dbPassword', 'Database password for use in connection'),
 
+    Property('publish_repo',
+             'Maven repository that hosts the Cloud SQL schema jar and the '
+             'registry server test jars. Such jars are needed for '
+             'server/schema integration tests. Please refer to <a '
+             'href="./integration/README.md">integration project</a> for more '
+             'information.'),
+    Property('baseSchemaTag',
+             'The nomulus version tag of the schema for use in the schema'
+             'deployment integration test (:db:schemaIncrementalDeployTest)'),
+    Property('schema_version',
+             'The nomulus version tag of the schema for use in a database'
+             'integration test.'),
+    Property('nomulus_version',
+             'The version of nomulus to test against in a database '
+             'integration test.'),
     Property('dot_path',
              'The path to "dot", part of the graphviz package that converts '
              'a BEAM pipeline to image. Setting this property to empty string '
              'will disable image generation.',
              '/usr/bin/dot'),
     Property('pipeline',
-             'The name of the Beam pipeline being staged.'),
-    Property('nomulus_env',
-             'For use by scripts. Normally not set manually.'),
-    Property('schema_env',
-             'For use by scripts. Normally not set manually.'),
-    Property('schemaTestArtifactsDir',
-             'For use by scripts. Normally not set manually.')
+             'The name of the Beam pipeline being staged.')
 ]
 
 GRADLE_FLAGS = [
@@ -261,7 +273,8 @@ def generate_gradle_properties() -> str:
 def get_root() -> str:
     """Returns the root of the nomulus build tree."""
     cur_dir = os.getcwd()
-    if not os.path.exists(os.path.join(cur_dir, 'core')) or \
+    if not os.path.exists(os.path.join(cur_dir, 'buildSrc')) or \
+       not os.path.exists(os.path.join(cur_dir, 'core')) or \
        not os.path.exists(os.path.join(cur_dir, 'gradle.properties')):
         raise Exception('You must run this script from the root directory')
     return cur_dir

config/presubmits.py

@@ -25,11 +25,7 @@ import textwrap
 import re
 
 # We should never analyze any generated files
-UNIVERSALLY_SKIPPED_PATTERNS = {"/build/", "cloudbuild-caches", "/out/", ".git/",
-     ".gradle/", "/dist/", "/console-alpha/", "/console-crash/", "/console-qa",
-     "/console-sandbox", "/console-production", "karma.conf.js", "polyfills.ts",
-     "test.ts", "/docs/console-endpoints/", "/bin/generated-sources/",
-     "/bin/generated-test-sources/", "src/main/generated", "src/test/generated"}
+UNIVERSALLY_SKIPPED_PATTERNS = {"/build/", "cloudbuild-caches", "/out/", ".git/", ".gradle/"}
 # We can't rely on CI to have the Enum package installed so we do this instead.
 FORBIDDEN = 1
 REQUIRED = 2
@@ -90,27 +86,45 @@ PRESUBMITS = {
     # License check
     PresubmitCheck(
         r".*Copyright 20\d{2} The Nomulus Authors\. All Rights Reserved\.",
-        ("java", "js", "soy", "sql", "py", "sh", "gradle", "ts"), {
-            ".git", "/build/", "node_modules/", "LoggerConfig.java", "registrar_bin.",
+        ("java", "js", "soy", "sql", "py", "sh", "gradle"), {
+            ".git", "/build/", "/generated/", "/generated_tests/",
+            "node_modules/", "LoggerConfig.java", "registrar_bin.",
             "registrar_dbg.", "google-java-format-diff.py",
             "nomulus.golden.sql", "soyutils_usegoog.js", "javascript/checks.js"
         }, REQUIRED):
         "File did not include the license header.",
 
     # Files must end in a newline
-    PresubmitCheck(r".*\n$", ("java", "js", "soy", "sql", "py", "sh", "gradle", "ts", "xml"),
-                   {"node_modules/", ".idea"}, REQUIRED):
+    PresubmitCheck(r".*\n$", ("java", "js", "soy", "sql", "py", "sh", "gradle"),
+                   {"node_modules/"}, REQUIRED):
         "Source files must end in a newline.",
 
-    # System.(out|err).println should only appear in tools/ or load-testing/
+    # System.(out|err).println should only appear in tools/
     PresubmitCheck(
         r".*\bSystem\.(out|err)\.print", "java", {
-            "/tools/", "/example/", "/load-testing/",
-            "RegistryTestServerMain.java", "TestServerExtension.java"
+            "StackdriverDashboardBuilder.java", "/tools/", "/example/",
+            "RegistryTestServerMain.java", "TestServerExtension.java",
+            "FlowDocumentationTool.java"
         }):
         "System.(out|err).println is only allowed in tools/ packages. Please "
         "use a logger instead.",
 
+    # ObjectifyService.register is restricted to main/ or AppEngineExtension.
+    PresubmitCheck(
+        r".*\bObjectifyService\.register", "java", {
+            "/build/", "/generated/", "node_modules/", "src/main/",
+            "AppEngineExtension.java"
+        }):
+      "ObjectifyService.register(...) is not allowed in tests. Please use "
+      "AppEngineExtension.register(...) instead.",
+
+    # PostgreSQLContainer instantiation must specify docker tag
+    # TODO(b/204572437): Fix the pattern to pass DatabaseSnapshotTest.java
+    PresubmitCheck(
+        r"[\s\S]*new\s+PostgreSQLContainer(<[\s\S]*>)?\(\s*\)[\s\S]*",
+        "java", {"DatabaseSnapshotTest.java"}):
+      "PostgreSQLContainer instantiation must specify docker tag.",
+
     # Various Soy linting checks
     PresubmitCheck(
         r".* (/\*)?\* {?@param ",
@@ -119,7 +133,7 @@ PRESUBMITS = {
     ):
         "In SOY please use the ({@param name: string} /** User name. */) style"
         " parameter passing instead of the ( * @param name User name.) style "
-        "parameter passing.",
+        "parameter pasing.",
     PresubmitCheck(
         r'.*\{[^}]+\w+:\s+"',
         "soy",
@@ -138,48 +152,41 @@ PRESUBMITS = {
         {},
     ):
         "All soy templates must use strict autoescaping",
+
+    # various JS linting checks
     PresubmitCheck(
-        r".*\nimport (static )?.*\.shaded\..*",
-        "java",
+        r".*goog\.base\(",
+        "js",
         {"/node_modules/"},
     ):
-        "Do not use shaded dependencies",
+        "Use of goog.base is not allowed.",
     PresubmitCheck(
-        r".*com\.google\.common\.truth\.Truth8.*",
-        "java",
+        r".*goog\.dom\.classes",
+        "js",
         {"/node_modules/"},
     ):
-        "Truth8 is deprecated. Use Truth instead.",
+        "Instead of goog.dom.classes, use goog.dom.classlist which is smaller "
+        "and faster.",
     PresubmitCheck(
-        r".*java\.util\.Date.*",
-        "java",
-        {"/node_modules/", "JpaTransactionManagerImpl.java"},
-    ):
-        "Do not use java.util.Date. Use classes in java.time package instead.",
-    PresubmitCheck(
-        r".*com\.google\.api\.client\.http\.HttpStatusCodes.*",
-        "java",
+        r".*goog\.getMsg",
+        "js",
         {"/node_modules/"},
     ):
-        "Use status code from jakarta.servlet.http.HttpServletResponse.",
+        "Put messages in Soy, instead of using goog.getMsg().",
     PresubmitCheck(
-        r".*mock\(Response\.class\).*",
-        "java",
-        {"/node_modules/"},
+        r".*(innerHTML|outerHTML)\s*(=|[+]=)([^=]|$)",
+        "js",
+        {"/node_modules/", "registrar_bin."},
     ):
-        "Do not mock Response, use FakeResponse.",
+        "Do not assign directly to the dom. Use goog.dom.setTextContent to set"
+        " to plain text, goog.dom.removeChildren to clear, or "
+        "soy.renderElement to render anything else",
     PresubmitCheck(
-        r".*javax\.servlet\..*",
-        "java",
-        {"/node_modules/"},
+        r".*console\.(log|info|warn|error)",
+        "js",
+        {"/node_modules/", "google/registry/ui/js/util.js", "registrar_bin."},
     ):
-        "Do not use javax.servlet.* Use jakarta.servlet.* instead.",
-    PresubmitCheck(
-        r".*javax\.inject\..*",
-        "java",
-        {"/node_modules/"},
-    ):
-        "Do not use javax.inject.* Use jakarta.inject.* instead.",
+        "JavaScript files should not include console logging.",
 }
 
 # Note that this regex only works for one kind of Flyway file.  If we want to
@@ -267,6 +274,26 @@ def verify_flyway_index():
   return not success
 
 
+def verify_javascript_deps():
+  """Verifies that we haven't introduced any new javascript dependencies."""
+  with open('package.json') as f:
+    package = json.load(f)
+
+  deps = list(package['dependencies'].keys())
+  if deps != EXPECTED_JS_PACKAGES:
+    print('Unexpected javascript dependencies.  Was expecting '
+          '%s, got %s.' % (EXPECTED_JS_PACKAGES, deps))
+    print(textwrap.dedent("""
+        * If the new dependencies are intentional, please verify that the
+        * license is one of the allowed licenses (see
+        * config/dependency-license/allowed_licenses.json) and add an entry
+        * for the package (with the license in a comment) to the
+        * EXPECTED_JS_PACKAGES variable in config/presubmits.py.
+        """))
+    return True
+  return False
+
+
 def get_files():
   for root, dirnames, filenames in os.walk("."):
     for filename in filenames:
@@ -291,5 +318,8 @@ if __name__ == "__main__":
   # when we put it here it fails fast before all of the tests are run.
   failed |= verify_flyway_index()
 
+  # Make sure we haven't introduced any javascript dependencies.
+  failed |= verify_javascript_deps()
+
   if failed:
     sys.exit(1)

config/show_upgrade_diffs.py

@@ -58,10 +58,7 @@ def parse_lockfile(filename: str) -> PackageMap:
         if line.startswith(b'#'):
             continue
         line = line.rstrip()
-        package = line.split(b'=')[0]
-        if package == 'empty':
-            continue
-        package = cast(Tuple[bytes, bytes, bytes], tuple(package.split(b':')))
+        package = cast(Tuple[bytes, bytes, bytes], tuple(line.split(b':')))
         result.setdefault(package[:-1], set()).add(package[-1])
     return result
 

console-webapp/.editorconfig

@@ -1,16 +0,0 @@
-# Editor configuration, see https://editorconfig.org
-root = true
-
-[*]
-charset = utf-8
-indent_style = space
-indent_size = 2
-insert_final_newline = true
-trim_trailing_whitespace = true
-
-[*.ts]
-quote_type = single
-
-[*.md]
-max_line_length = off
-trim_trailing_whitespace = false

console-webapp/.eslintrc.json

@@ -1,50 +0,0 @@
-{
-  "root": true,
-  "ignorePatterns": [
-    "projects/**/*"
-  ],
-  "overrides": [
-    {
-      "files": [
-        "*.ts"
-      ],
-      "extends": [
-        "eslint:recommended",
-        "plugin:@typescript-eslint/recommended",
-        "plugin:@angular-eslint/recommended",
-        "plugin:@angular-eslint/template/process-inline-templates"
-      ],
-      "rules": {
-        "@angular-eslint/directive-selector": [
-          "error",
-          {
-            "type": "attribute",
-            "prefix": "app",
-            "style": "camelCase"
-          }
-        ],
-        "@angular-eslint/component-selector": [
-          "error",
-          {
-            "type": "element",
-            "prefix": "app",
-            "style": "kebab-case"
-          }
-        ],
-        "eol-last": [
-          "error",
-          "always"
-        ]
-      }
-    },
-    {
-      "files": [
-        "*.html"
-      ],
-      "extends": [
-        "plugin:@angular-eslint/template/recommended"
-      ],
-      "rules": {}
-    }
-  ]
-}

console-webapp/.gitignore

@@ -1,47 +0,0 @@
-# See http://help.github.com/ignore-files/ for more about ignoring files.
-
-# Compiled output
-/dist
-/tmp
-/out-tsc
-/bazel-out
-
-# Node
-/node_modules
-npm-debug.log
-yarn-error.log
-
-# IDEs and editors
-.idea/
-.project
-.classpath
-.c9/
-*.launch
-.settings/
-*.sublime-workspace
-
-# Visual Studio Code
-.vscode/*
-!.vscode/settings.json
-!.vscode/tasks.json
-!.vscode/launch.json
-!.vscode/extensions.json
-.history/*
-
-# Miscellaneous
-/.angular/cache
-.sass-cache/
-/connect.lock
-/coverage
-/libpeerconnection.log
-testem.log
-/typings
-.nx/
-
-# System files
-.DS_Store
-Thumbs.db
-
-# Build artifact
-/staged/dist
-/staged/console-*

console-webapp/.prettierrc.json

@@ -1 +0,0 @@
-{}

console-webapp/README.md

@@ -1,52 +0,0 @@
-# ConsoleWebapp
-
-A web application for managing [Nomulus](https://github.com/google/nomulus).
-
-## Status
-
-Console webapp is currently under active development and some parts of it are
-expected to change.
-
-## Deployment
-
-The webapp is deployed with the nomulus default service war to GKE.
-During nomulus default service war build task, gradle script triggers the
-following:
-
-1) Console webapp build script `buildConsoleWebapp`, which installs
-   dependencies, assembles a compiled ts -> js, minified, optimized static
-   artifact (html, css, js)
-2) Artifact assembled in step 1 then gets copied to core project web artifact
-   location, so that it can be deployed with the rest of the core webapp
-
-## Development server
-
-Run `npm run start:dev` to start both webapp dev server and API server instance.
-Navigate to `http://localhost:4200/`. The application will automatically reload
-if you change any of the source files.
-
-## Code scaffolding
-
-Run `ng generate component component-name` to generate a new component. You can
-also use `ng generate directive|pipe|service|class|guard|interface|enum|module`.
-
-## Build
-
-Run `ng build` to build the project. The build artifacts will be stored in
-the `dist/` directory.
-
-## Running unit tests
-
-Run `ng test` to execute the unit tests
-via [Karma](https://karma-runner.github.io).
-
-## Running end-to-end tests
-
-Run `ng e2e` to execute the end-to-end tests via a platform of your choice. To
-use this command, you need to first add a package that implements end-to-end
-testing capabilities.
-
-## Further help
-
-To get more help on the Angular CLI use `ng help` or go check out
-the [Angular CLI Overview and Command Reference](https://angular.io/cli) page.

console-webapp/angular.json

@@ -1,187 +0,0 @@
-{
-  "$schema": "./node_modules/@angular/cli/lib/config/schema.json",
-  "version": 1,
-  "newProjectRoot": "projects",
-  "projects": {
-    "console-webapp": {
-      "projectType": "application",
-      "schematics": {
-        "@schematics/angular:component": {
-          "style": "scss"
-        }
-      },
-      "root": "",
-      "sourceRoot": "src",
-      "prefix": "app",
-      "architect": {
-        "build": {
-          "builder": "@angular-devkit/build-angular:application",
-          "options": {
-            "outputPath": {
-              "base": "staged/dist/",
-              "browser": ""
-            },
-            "index": "src/index.html",
-            "polyfills": [
-              "src/polyfills.ts"
-            ],
-            "tsConfig": "tsconfig.app.json",
-            "inlineStyleLanguage": "scss",
-            "assets": [
-              "src/favicon.ico",
-              "src/assets"
-            ],
-            "styles": [
-              "src/theme.scss",
-              "src/styles.scss"
-            ],
-            "stylePreprocessorOptions": {
-              "includePaths": ["node_modules/"]
-            },
-            "scripts": [],
-            "browser": "src/main.ts"
-          },
-          "configurations": {
-            "production": {
-              "budgets": [
-                {
-                  "type": "initial",
-                  "maximumWarning": "2mb",
-                  "maximumError": "5mb"
-                },
-                {
-                  "type": "anyComponentStyle",
-                  "maximumWarning": "2kb",
-                  "maximumError": "4kb"
-                }
-              ],
-              "fileReplacements": [
-                {
-                  "replace": "src/environments/environment.ts",
-                  "with": "src/environments/environment.prod.ts"
-                }
-              ],
-              "outputHashing": "all"
-            },
-            "sandbox": {
-              "budgets": [
-                {
-                  "type": "initial",
-                  "maximumWarning": "2mb",
-                  "maximumError": "5mb"
-                },
-                {
-                  "type": "anyComponentStyle",
-                  "maximumWarning": "2kb",
-                  "maximumError": "4kb"
-                }
-              ],
-              "fileReplacements": [
-                {
-                  "replace": "src/environments/environment.ts",
-                  "with": "src/environments/environment.sandbox.ts"
-                }
-              ],
-              "outputHashing": "all"
-            },
-            "crash": {
-              "optimization": false,
-              "extractLicenses": false,
-              "sourceMap": true,
-              "namedChunks": true
-            },
-            "alpha": {
-              "optimization": false,
-              "extractLicenses": false,
-              "sourceMap": true,
-              "namedChunks": true
-            },
-            "qa": {
-              "optimization": false,
-              "extractLicenses": false,
-              "sourceMap": true,
-              "namedChunks": true
-            },
-            "development": {
-              "optimization": false,
-              "extractLicenses": false,
-              "sourceMap": true,
-              "namedChunks": true,
-            }
-          },
-          "defaultConfiguration": "production"
-        },
-        "serve": {
-          "builder": "@angular-devkit/build-angular:dev-server",
-          "configurations": {
-            "production": {
-              "buildTarget": "console-webapp:build:production"
-            },
-            "alpha": {
-              "buildTarget": "console-webapp:build:alpha"
-            },
-            "crash": {
-              "buildTarget": "console-webapp:build:crash"
-            },
-            "sandbox": {
-              "buildTarget": "console-webapp:build:sandbox"
-            },
-            "qa": {
-              "buildTarget": "console-webapp:build:qa"
-            },
-            "development": {
-              "buildTarget": "console-webapp:build:development"
-            }
-          },
-          "defaultConfiguration": "development"
-        },
-        "extract-i18n": {
-          "builder": "@angular-devkit/build-angular:extract-i18n",
-          "options": {
-            "buildTarget": "console-webapp:build"
-          }
-        },
-        "test": {
-          "builder": "@angular-devkit/build-angular:karma",
-          "options": {
-            "main": "src/test.ts",
-            "polyfills": "src/polyfills.ts",
-            "tsConfig": "tsconfig.spec.json",
-            "karmaConfig": "karma.conf.js",
-            "inlineStyleLanguage": "scss",
-            "assets": [
-              "src/favicon.ico",
-              "src/assets"
-            ],
-            "styles": [
-              "src/theme.scss",
-              "src/styles.scss"
-            ],
-            "stylePreprocessorOptions": {
-              "includePaths": ["node_modules/"]
-            },
-            "scripts": []
-          }
-        },
-        "lint": {
-          "builder": "@angular-eslint/builder:lint",
-          "options": {
-            "lintFilePatterns": [
-              "src/**/*.ts",
-              "src/**/*.html"
-            ]
-          }
-        }
-      }
-    }
-  },
-  "cli": {
-    "cache": {
-      "enabled": false
-    },
-    "analytics": false,
-    "schematicCollections": [
-      "@angular-eslint/schematics"
-    ]
-  }
-}

console-webapp/build.gradle

@@ -1,109 +0,0 @@
-// Copyright 2024 The Nomulus Authors. All Rights Reserved.
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-def consoleDir = "${rootDir}/console-webapp"
-def projectParam = "--project=${rootProject.gcpProject}"
-
-clean {
-  delete "${consoleDir}/node_modules"
-  delete "${consoleDir}/staged/dist"
-}
-
-task npmInstallDeps(type: Exec) {
-  workingDir "${consoleDir}/"
-  executable 'npm'
-  args 'i', '--no-audit', '--no-fund', '--loglevel=error'
-}
-
-task runConsoleWebappLocally(type: Exec) {
-  workingDir "${consoleDir}/"
-  executable 'npm'
-  args 'run', 'start:dev'
-}
-
-task runConsoleWebappUnitTests(type: Exec) {
-  workingDir "${consoleDir}/"
-  executable 'npm'
-  args 'run', 'test'
-}
-
-task buildConsoleWebapp(type: Exec) {
-  workingDir "${consoleDir}/"
-  executable 'npm'
-  def configuration = project.getProperty('configuration')
-  args 'run', "build", "--configuration=${configuration}"
-  doFirst {
-    println "Building console for environment: ${configuration}"
-  }
-}
-
-task buildConsoleForAll() {}
-
-def createConsoleTask = { env ->
-  project.tasks.register("buildConsoleFor${env.capitalize()}", Exec) {
-    workingDir "${consoleDir}/"
-    executable 'npm'
-    args 'run', 'build', "--configuration=${env}"
-    doFirst {
-      println "Building console for environment: ${env}"
-    }
-    doLast {
-      copy {
-        from "${consoleDir}/staged/dist/"
-        into "${consoleDir}/staged/console-${env}"
-      }
-      delete "${consoleDir}/staged/dist"
-    }
-    dependsOn(tasks.npmInstallDeps)
-  }
-  project.tasks.register("deleteConsoleFor${env.capitalize()}", Delete) {
-    delete "${consoleDir}/staged/console-${env}"
-  }
-  tasks.named('clean') {
-    dependsOn(tasks.named("deleteConsoleFor${env.capitalize()}"))
-  }
-  tasks.named('buildConsoleForAll') {
-    dependsOn(tasks.named("buildConsoleFor${env.capitalize()}"))
-  }
-}
-
-['alpha', 'crash', 'qa', 'sandbox', 'production'].forEach {env ->
-  createConsoleTask(env)
-}
-
-// Force an order so we don't run these tasks in parallel.
-tasks.buildConsoleForCrash.mustRunAfter(tasks.buildConsoleForAlpha)
-tasks.buildConsoleForQa.mustRunAfter(tasks.buildConsoleForCrash)
-tasks.buildConsoleForSandbox.mustRunAfter(tasks.buildConsoleForQa)
-tasks.buildConsoleForProduction.mustRunAfter(tasks.buildConsoleForSandbox)
-// This task must run last, otherwise the previous tasks will have deleted the "dist" folder.
-tasks.buildConsoleWebapp.mustRunAfter(tasks.buildConsoleForProduction)
-
-task applyFormatting(type: Exec) {
-  workingDir "${consoleDir}/"
-  executable 'npm'
-  args 'run', 'prettify'
-}
-
-task checkFormatting(type: Exec) {
-  workingDir "${consoleDir}/"
-  executable 'npm'
-  args 'run', 'prettify:check'
-}
-
-tasks.buildConsoleWebapp.dependsOn(tasks.npmInstallDeps)
-tasks.runConsoleWebappUnitTests.dependsOn(tasks.npmInstallDeps)
-tasks.applyFormatting.dependsOn(tasks.npmInstallDeps)
-tasks.checkFormatting.dependsOn(tasks.npmInstallDeps)
-tasks.build.dependsOn(tasks.checkFormatting)
-tasks.build.dependsOn(tasks.runConsoleWebappUnitTests)

console-webapp/buildscript-gradle.lockfile

@@ -1,4 +0,0 @@
-# This is a Gradle generated file for dependency locking.
-# Manual edits can break the build and are not advised.
-# This file is expected to be part of source control.
-empty=classpath

console-webapp/dev-proxy.config.json

@@ -1,9 +0,0 @@
-{
-  "/console-api":
-  {
-    "target": "http://[::1]:8080",
-    "secure": false,
-    "logLevel": "debug",
-    "changeOrigin": true
-  }
-}

console-webapp/gradle.lockfile

@@ -1,47 +0,0 @@
-# This is a Gradle generated file for dependency locking.
-# Manual edits can break the build and are not advised.
-# This file is expected to be part of source control.
-aopalliance:aopalliance:1.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.github.ben-manes.caffeine:caffeine:3.0.5=annotationProcessor,errorprone,testAnnotationProcessor
-com.github.kevinstern:software-and-algorithms:1.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.auto.service:auto-service-annotations:1.0.1=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.auto.value:auto-value-annotations:1.9=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.auto:auto-common:1.2.1=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.code.findbugs:jsr305:3.0.2=annotationProcessor,checkstyle,errorprone,testAnnotationProcessor
-com.google.errorprone:error_prone_annotation:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.errorprone:error_prone_annotations:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.errorprone:error_prone_annotations:2.7.1=checkstyle
-com.google.errorprone:error_prone_check_api:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.errorprone:error_prone_core:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.errorprone:error_prone_type_annotations:2.23.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.errorprone:javac:9+181-r4173-1=errorproneJavac
-com.google.guava:failureaccess:1.0.1=annotationProcessor,checkstyle,errorprone,testAnnotationProcessor
-com.google.guava:guava-parent:32.1.1-jre=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.guava:guava:31.0.1-jre=checkstyle
-com.google.guava:guava:32.1.1-jre=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=checkstyle
-com.google.inject:guice:5.1.0=annotationProcessor,errorprone,testAnnotationProcessor
-com.google.j2objc:j2objc-annotations:1.3=checkstyle
-com.google.protobuf:protobuf-java:3.19.6=annotationProcessor,errorprone,testAnnotationProcessor
-com.puppycrawl.tools:checkstyle:9.3=checkstyle
-commons-beanutils:commons-beanutils:1.9.4=checkstyle
-commons-collections:commons-collections:3.2.2=checkstyle
-info.picocli:picocli:4.6.2=checkstyle
-io.github.eisop:dataflow-errorprone:3.34.0-eisop1=annotationProcessor,errorprone,testAnnotationProcessor
-io.github.java-diff-utils:java-diff-utils:4.12=annotationProcessor,errorprone,testAnnotationProcessor
-javax.inject:javax.inject:1=annotationProcessor,errorprone,testAnnotationProcessor
-net.sf.saxon:Saxon-HE:10.6=checkstyle
-org.antlr:antlr4-runtime:4.9.3=checkstyle
-org.checkerframework:checker-qual:3.12.0=checkstyle
-org.checkerframework:checker-qual:3.33.0=annotationProcessor,errorprone,testAnnotationProcessor
-org.jacoco:org.jacoco.agent:0.8.12=jacocoAgent,jacocoAnt
-org.jacoco:org.jacoco.ant:0.8.12=jacocoAnt
-org.jacoco:org.jacoco.core:0.8.12=jacocoAnt
-org.jacoco:org.jacoco.report:0.8.12=jacocoAnt
-org.javassist:javassist:3.28.0-GA=checkstyle
-org.ow2.asm:asm-commons:9.7=jacocoAnt
-org.ow2.asm:asm-tree:9.7=jacocoAnt
-org.ow2.asm:asm:9.7=jacocoAnt
-org.pcollections:pcollections:3.1.4=annotationProcessor,errorprone,testAnnotationProcessor
-org.reflections:reflections:0.10.2=checkstyle
-empty=compileClasspath,deploy_jar,runtimeClasspath,testCompileClasspath,testRuntimeClasspath

console-webapp/gradle.properties

@@ -1 +0,0 @@
-configuration=production

console-webapp/karma.conf.js

@@ -1,55 +0,0 @@
-// Karma configuration file, see link for more information
-// https://karma-runner.github.io/1.0/config/configuration-file.html
-
-module.exports = function (config) {
-  config.set({
-    customLaunchers: {
-      ChromeHeadless: {
-        base: 'Chrome',
-        flags: [
-          '--no-sandbox',
-          '--disable-gpu',
-          '--headless',
-          '--remote-debugging-port=9222'
-        ]
-      }
-    },
-    basePath: '',
-    frameworks: ['jasmine', '@angular-devkit/build-angular'],
-    plugins: [
-      require('karma-jasmine'),
-      require('karma-chrome-launcher'),
-      require('karma-jasmine-html-reporter'),
-      require('karma-coverage'),
-      require('@angular-devkit/build-angular/plugins/karma')
-    ],
-    client: {
-      jasmine: {
-        // you can add configuration options for Jasmine here
-        // the possible options are listed at https://jasmine.github.io/api/edge/Configuration.html
-        // for example, you can disable the random execution with `random: false`
-        // or set a specific seed with `seed: 4321`
-      },
-      clearContext: false // leave Jasmine Spec Runner output visible in browser
-    },
-    jasmineHtmlReporter: {
-      suppressAll: true // removes the duplicated traces
-    },
-    coverageReporter: {
-      dir: require('path').join(__dirname, './coverage/console-webapp'),
-      subdir: '.',
-      reporters: [
-        { type: 'html' },
-        { type: 'text-summary' }
-      ]
-    },
-    reporters: ['progress', 'kjhtml'],
-    port: 9876,
-    colors: true,
-    logLevel: config.LOG_INFO,
-    autoWatch: true,
-    browsers: ['Chrome'],
-    singleRun: false,
-    restartOnFileChange: true
-  });
-};